CODEWITHSUNDEEP
c#debuggingprocess
PeteGO
PeteGO

Reputation: 5791

When to use Process.EnterDebugMode

On the MSDN page about Process.EnterDebugMode it says:

Some operating system processes run in a special mode. Attempting to read properties of or attach to these processes is not possible unless you have called EnterDebugMode on the component.

What is the special mode that is referred to here?

Upvotes: 5

Views: 2281

Answers (1)

Justin Dearing
Justin Dearing

Reputation: 14938

The "special mode" is simply adding SeDebugPrivilege. As Raymond Chen points out, If you grant somebody SeDebugPrivilege, you gave away the farm.

A user with SeDebugPrivilege can connect to any process and debug it. When you debug a process you can inject code into it. So from a security point of view, the user is basically an administrator.

Upvotes: 6

Related Questions