r/HowToHack

Currently working on a HVNC in C++, I’m struggling with injecting inputs into secure desktops (UAC prompts) from the hidden desktop created via CreateDesktopA. Currently, inputs are queued in a std::deque and posted to target windows using PostMessageA, with window resolution via WindowFromPoint and coordinate translation to client space. This works fine for normal windows but fails with secure desktops (isolated session context) How can I inject inputs into secure desktops without requiring elevated privileges, while keeping it hidden? Is there a way to bridge the desktop context gap, perhaps by manipulating session tokens or hooking into the secure desktop’s message loop?