Skip to content

Calculaception is an open-source tool hooking Windows 10 Calculator with Frida

License

Notifications You must be signed in to change notification settings

Siss3l/Calculaception

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Hooking Windows 10 Calculator 64-bit in Python 3

CI/CD CI/CD Known_Vulnerabilities

⚖️ Disclaimer

The code within this repository comes with no guarantee, the use of this code is your responsibility. Author(s) have no responsibility/liability for how you choose to use any of the source code available here. By using any of the files available in this repository, you understand that you are agreeing to use at your own risk. Once again, all files available here are for education/research purposes only.

🧩 Installation

Windows Calculator must be installed to work, knowing that it is not by default on Windows Sandbox.

✨ Prerequisite

Python 3 needs the following (integrity checked) packages:

🚀 Usage

Run one of the following commands you prefer in order to be able to start a Calculator process in Calculator
by clicking on their Send feedback button:

python .\local\payload\irc.py
cmd
python.exe C:\Users\WDAGUtilityAccount\Desktop\local\payload\irc.py

There is a default relative path of WindowsCalculator editable.
See this part here:

r"explorer.exe shell:AppsFolder\Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"

⚙ Configuration

If we want to use the configuration file, we have to change the username test by ours (as in %username%) in the sandbox configuration to run it correctly on Windows Sandbox environment.

<HostFolder>C:\Users\test\Desktop\local</HostFolder>

Functional tested versions on Calculator are:

  • 10.1804.11545.0
  • 10.2103.8.0
  • 11.2210.0.0

There are also several alternatives to run a Calculator application: