wbk/TrustedInstallerPOC
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

refactor: update readme.md to include more details

Browse source
This commit is contained in:
Aarush Ahuja 2023-02-16 16:36:17 +05:30 • committed by GitHub
parent 05bb85f414
commit 65f408727a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 32 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

39
README.md
View file

@ -1,12 +1,37 @@
# TrustedInstaller # TrustedInstaller
A simple Proof of Concept in Golang to start a new shell as TrustedInstaller. This code accompanies FourCore's blog about TrustedInstaller. It is important to note that you need to run this as a user which has SeDebugPrivileges. Upon running, it will automatically ask for UAC in case you are not running as an Administrator.
Use the `RunAsTrustedInstaller` function to pass any executable to be run with TrustedInstaller privileges. A simple Proof of Concept in Go to spawn a new shell as TrustedInstaller. Read more about how this PoC works on this [blog about TrustedInstaller](https://fourcore.io/blogs/no-more-access-denied-i-am-trustedinstaller). It is important to note that this should be executed as a user which has SeDebugPrivileges. Upon execution, it will automatically ask for UAC in case it is not executed as as an Administrator.
To run ## POC
1. git clone the repository
2. ensure you have go compiler installed
3. You can either build a binary using `go build ti` or run it directly using `go run ti`
It will spawn a new cmd shell as TrustedInstaller which you can check by running `whoami /all` 1. Clone the repository
```
$ git clone https://github.com/FourCoreLabs/TrustedInstallerPOC.git
```
2. Ensure you have Go installed. This POC has been tested on Go 1.19.
3. Either build the binary and execute it
```
$ go build ti
$ ./ti.exe
```
4. Or run it directly
```
$ go run ti
```
This will spawn a new cmd shell with TrustedInstaller privileges which can be confirmed by running the command `whoami /all`
<p align="center">
![demo](https://user-images.githubusercontent.com/26490648/219342533-79d0cf34-0bf2-4f63-b805-34fca5aff012.gif) ![demo](https://user-images.githubusercontent.com/26490648/219342533-79d0cf34-0bf2-4f63-b805-34fca5aff012.gif)
</p>
## API
- RunAsTrustedInstaller
- Use the `RunAsTrustedInstaller` function to pass any executable to be run with TrustedInstaller privileges.