Skip to content

Make an executable run with TrustedInstaller permissions under SYSTEM account.

Notifications You must be signed in to change notification settings

rara64/GetTrustedInstaller

 
 

Repository files navigation

GetTrustedInstaller - Fork of py7hagoras/GetSystem

This is a fork of py7hagoras/GetSystem repo that was modified to be able to make an executable run with NT SERVICE\TRUSTEDINSTALLER permissions by spawning it as a child of TrustedInstaller.exe under SYSTEM account.

Usage:

GetTrustedInstaller.exe <absolute path of executable to run + arguments>

GetTrustedInstaller.exe "C:\Windows\System32\cmd.exe /k whoami"

Showing run of GetTrustedInstaller to spawn cmd.exe with TrustedInstaller.exe as a Parent

About

Make an executable run with TrustedInstaller permissions under SYSTEM account.

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C# 100.0%