Jump to content
Fi8sVrs

TeamViewer_Permissions_Hook_V1

Recommended Posts

  • Active Members

A proof of concept injectable C++ dll, that uses naked inline hooking and direct memory modification to change your TeamViewer permissions.

 

Features

  • As the Server - Enables extra menu item options on the right side pop-up menu. Most useful so far to enable the "switch sides" feature which is normally only active after you have already authenticated control with the client, and initiated a change of control/sides.
  • As the Client - Allows for control of mouse with disregard to servers current control settings and permissions.

 

Demo

server_switch_sides.gif?raw=true

client_takes_control.gif?raw=true

Rundown

  • Utilizes signature/pattern scanning to dynamically locate key parts in the code at which the assembly registers hold pointers to interesting classes. Applies inline naked hooks a.k.a code caves, to hi-jack the pointers to use for modification via direct memory access to their reversed classes.
  • Inject and follow the steps

 

Requirements

  • Your favorite Manual Mapper, PE Loader, DLL Injector, inject into - "TeamViewer.exe"
  • This version was Built on Windows 10, for TeamViewer x86 Version 13.0.5058 - (Other versions of TeamViewer have not been tested but with more robust signatures it may work, linux not supported)

 

Disclaimer

Developed for educational purposes as a proof of concept for testing. I do not condone the or support the use of this software for unethical or illicit purposes. No responsibility is held or accepted for misuse.

 

Credit

@timse93 - Research and Testing

 

Download: TeamViewer_Permissions_Hook_V1-master.zip

 

Source: https://github.com/gellin/TeamViewer_Permissions_Hook_V1

 

  • Upvote 1
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...