sample trcapi32 not use DetourCreateProcessWithDll in CreateProcessAsUser
Open
Nobody has claimed this yet.
bug
enhancement
- Dominant language
- C++
- Stars
- 6.4k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
As said in title, trcapi sample not use DetourCreateProcessWithDll in CreateProcessAsUser and
CreateProcessWithToken.
process may escape from detours hook if they didn't create process with CreateProcessA/W
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the trcapi32 sample and inspect how it creates processes. Compare its handling of CreateProcessAsUser and CreateProcessWithToken with DetourCreateProcessWithDll. Done means the sample uses the Detours process-creation path for these cases so child processes cannot escape the hook.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- operating-systems
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100