wbk/TrustedInstallerPOC
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
TrustedInstallerPOC/README.md
Swapnil ad6540b29f Add TrustedInstaller POC
2023-02-16 16:09:18 +05:30

718 B
Raw Blame History

TrustedInstaller

A simple Proof of Concept in Golang to start a new shell as TrustedInstaller. This code accompanies FourCore's blog about TrustedInstaller. It is important to note that you need to run this as a user which has SeDebugPrivileges. Upon running, it will automatically ask for UAC in case you are not running as an Administrator.

Use the RunAsTrustedInstaller function to pass any executable to be run with TrustedInstaller privileges.

To run

  1. git clone the repository
  2. ensure you have go compiler installed
  3. You can either build a binary using go build ti or run it directly using go run ti

It will spawn a new cmd shell as TrustedInstaller which you can check by running whoami /all