Windows has no security between processes reading and writing each other's memory as long as they are from the same user. You doing need kernel level access to do it.

▲

glitchc 16 hours ago | parent | next [-]

That hasn't been true since Windows 98/ME. Windows uses virtual addressing plus ASLR and DEP for process isolation/protection. See here:

https://learn.microsoft.com/en-us/windows-hardware/drivers/g...

▲

ChocolateGod 16 hours ago | parent | next [-]

You can use system APIs to get the memory space of another application in Windows as long as their run by the same user.

However iirc processes can opt out of this so only administrators can.

	▲	Hikikomori 9 hours ago \| parent [-]
		>However iirc processes can opt out of this so only administrators can. Can override those opts without admin as well.

▲

charcircuit 16 hours ago | parent | prev [-]

ReadProcessMemory and WriteProcessMemory are APIs Windows exposes for using other processes memory. Even if a process changes the default DACL to block it, admin level access can bypass it.

https://learn.microsoft.com/en-us/windows/win32/api/memoryap...

▲

charcircuit 15 hours ago | parent | prev [-]

don't need