search

SharkCagey / SharkCage

1 stars 3 forks source link

Aquisiton of token with SeCreateTokenPrivilege privilege #71

Closed bencikpeter closed 6 years ago

bencikpeter commented 6 years ago

Resolving #68

CageManager is now started with a token of process that has SeCreateTokenPrivilege present.

To allow you to test on your systems, I´ve created a simple PrivilegeEnumerator program that will aquire it parent´s process security context and enumerate all privileges available for it. Last output is a sentence saying if process has SeCreateTokenPrivilege or not (to spare you from searching the list).

Please try to run that code inside a cage before approving (my system is a complete mess regarding privileges after I´ve been developing that token modification library 😅 ). It will output all privileges available for CageManager

bencikpeter commented 6 years ago

@DonatJR ´s suggestions implemented, merging.