search

S3cur3Th1sSh1t / SharpImpersonation

A User Impersonation tool - via Token or Shellcode injection
BSD 3-Clause "New" or "Revised" License
400 stars 72 forks source link

[-] NtQueryInformationToken failed - error code: 3221225507 #5

Open EbolaMan-YT opened 1 year ago

EbolaMan-YT commented 1 year ago

This just loops:

[*] Username given, checking processes

[+] NtOpenProcess Success!

[+] NtOpenProcessToken Success! [-] NtQueryInformationToken failed - error code: 3221225507 [+] NtQueryInformationToken Success!

[+] NtClose Success!

[+] NtClose Success!

[+] NtOpenProcess Success!

EbolaMan-YT commented 1 year ago

I'm running a system shell btw

S3cur3Th1sSh1t commented 1 year ago

Try to use WMI enumeration instead by putting “wmi” in the end. The DInvoke approach is not stable for all os versions.

MattGrol commented 1 year ago

Hi, any news about this error? I've got also this error trying .\SharpImpersonation.exe list elevated, .\SharpImpersonation.exe list wmi and .\SharpImpersonation.exe list. I've tried this tool on Windows 10 Education 10.0.19045 Build 19045.