WinSystemShell

Description

A local privilege escalation utility that allows elevating from an administrator context to the SYSTEM account on Windows to perform high-privilege operations.

Requirements

This package require:

• python3
• python3 Standard Library

Installation

Pip

python3 -m pip install WinSystemShell

Git

git clone "https://github.com/mauricelambert/WinSystemShell.git"
cd "WinSystemShell"
python3 -m pip install .

Wget

wget https://github.com/mauricelambert/WinSystemShell/archive/refs/heads/main.zip
unzip main.zip
cd WinSystemShell-main
python3 -m pip install .

cURL

curl -O https://github.com/mauricelambert/WinSystemShell/archive/refs/heads/main.zip
unzip main.zip
cd WinSystemShell-main
python3 -m pip install .

Usages

Command line

WinSystemShell              # Using CLI package executable
python3 -m WinSystemShell   # Using python module
python3 WinSystemShell.pyz  # Using python executable
WinSystemShell.exe          # Using python Windows executable

python WinSystemShell.py --executable C:\Windows\System32\cmd.exe --schtasks "SystemRunOnce.exe" --server-path C:\temp\server.py --pipein shellpipein --pipeout shellpipeout

Python script

from WinSystemShell import *

PipeClient(executable=r"C:\Windows\System32\cmd.exe", schtasks="SystemRunOnce.exe", server_path=r"C:\temp\server.py", pipein="shellpipein", pipeout="shellpipeout").run()

Links

• Pypi
• Github
• Documentation
• Python executable
• Python Windows executable
• Server Documentation
• Server Python executable
• Server Python Windows executable

License

Licensed under the GPL, version 3.