Bypass-SetWindowDisplayAffinity - GitLite

KO | EN

gitlite — search

#javascript #python #typescript #go #deep-learning #java #awesome #cli #kubernetes #awesome-list #pytorch #mcp #openai #open-source

Bypass-SetWindowDisplayAffinity

(★ 148)

Bypass Window Capture Protection on Windows, Bypass SetWindowDisplayAffinity in driver level without dll injecting.

파일 탐색기

최종 버전 다운로드 (.zip)

- - hde64.cpp
  - hde64.h
  - pstdint.h
  - table64.h
- headers.hpp
- helpers.h
- hook.cpp
- hook.hpp
- imports.hpp
- infinity_hook_pro_max.inf
- infinity_hook_pro_max.vcxproj
- infinity_hook_pro_max.vcxproj.filters
- main.cpp
- main.h
- utils.hpp
.gitignore
build.bat
Bypass-SetWindowDisplayAffinity.rar
infinity_hook_pro_max.cat
infinity_hook_pro_max.inf
infinity_hook_pro_max.sln
infinity_hook_pro_max.sys
README.md

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/TopSoftdeveloper/Bypass-SetWindowDisplayAffinity

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd Bypass-SetWindowDisplayAffinity

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. .NET

보통 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
.NET SDK dotnet 명령어를 쓰기 위한 SDK입니다.

dotnet restore

프로젝트에 필요한 패키지를 내려받습니다.

dotnet run

프로젝트를 빌드하고 바로 실행합니다.

✅ dotnet run 실행 후 터미널에 나타나는 안내 메시지나 주소를 확인하세요.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Kernel-Level Window Capture Bypass (Educational Research)
## More Advanced Version is released in another repository
Without using driver solution is ready in https://github.com/TopSoftdeveloper/SetWindowDisplayAffinity-Bypass
 
## Overview

Modern Windows applications may rely on **`SetWindowDisplayAffinity`** (`WDA_MONITOR`, `WDA_EXCLUDEFROMCAPTURE`) to prevent screenshots and screen recording.
At the **user-mode level**, these protections are relatively well understood.

This project demonstrates a **kernel-mode approach**, using a **driver-level patch**, to bypass such restrictions and allow screen capture of protected windows.

> ⚠️ **This project is for educational and research purposes only.**

---

## Technical Summary

* Operates at the **kernel / driver level**
* Bypasses window capture protection **below user-mode APIs**
* Does **not** rely on:

* DLL injection
  * User-mode API hooking
* Demonstrates how display affinity enforcement can be neutralized from kernel space

---

## Tested Environment

| Component     | Value                    |
| ------------- | ------------------------ |
| OS            | Windows 10               |
| Version       | 22H2                     |
| Build         | 19045                    |
| Test Platform | VMware (Virtual Machine) |

✔️ Fully functional and stable in the tested virtualized environment.

---

## Notes on Real Hardware Usage

This project was validated **inside a virtual machine**.

For **real Windows installations**, driver loading and kernel patching require additional setup and safeguards.

Developers should refer to the following project for **driver installation and kernel hook techniques**:

🔗 **Reference:**
[https://github.com/iPower/KasperskyHook](https://github.com/iPower/KasperskyHook)

That repository provides guidance on:

* Proper driver loading
* Kernel hook infrastructure
* Compatibility considerations for real systems

---

## Important Considerations

* Kernel-level modifications:

* May trigger PatchGuard
  * May require test signing mode
  * Can destabilize the system if implemented incorrectly
* Behavior may vary across:

* Windows builds
  * GPU drivers
  * Security software

This project **does not guarantee compatibility** beyond the tested configuration.

---

## Disclaimer

This repository is published **strictly for educational, research, and defensive security analysis**.

The author:

* Does **not** encourage bypassing DRM, privacy protection, or security mechanisms
* Is **not responsible** for misuse, system damage, or legal consequences
* Strongly advises compliance with all applicable laws and software terms

---

## Intended Audience

* Reverse engineers
* Windows kernel researchers
* Security professionals
* Malware analysts (defensive research)
* OS internals learners

**Not intended for end users or production environments.**

---

## Contact & Support

For research discussion or support:

* **Telegram**: [@liweiworker](https://t.me/liweiworker)