Fixed get_lsass_pid(), using a better method

skelsec / pypykatz

Mimikatz implementation in pure Python

MIT License

2.81k stars 371 forks source link

Fixed get_lsass_pid(), using a better method #64

Closed ebfe90 closed 3 years ago

ebfe90 commented 3 years ago

Hello,

The function get_lsass_pid() won't work on systems with protected processes even with the Debug privilege. I've used another method to retrieve the process infos which does not require any special privilege and doesn't need OpenProcess and QueryFullProcessImageNameW and also it retrieved the full path of the process.

skelsec commented 3 years ago

Thank you for the PR, I'll review it as soon as time allows it, the merge will probably happen with the release of the next version.

skelsec commented 3 years ago

This looks good, thank you for your contribution.