Skip to content

Latest commit

 

History

History
14 lines (6 loc) · 602 Bytes

README.md

File metadata and controls

14 lines (6 loc) · 602 Bytes

GetTrustedInstaller - Fork of py7hagoras/GetSystem

This is a fork of py7hagoras/GetSystem repo that was modified to be able to make an executable run with NT SERVICE\TRUSTEDINSTALLER permissions by spawning it as a child of TrustedInstaller.exe under SYSTEM account.

Usage:

GetTrustedInstaller.exe <absolute path of executable to run + arguments>

GetTrustedInstaller.exe "C:\Windows\System32\cmd.exe /k whoami"

Showing run of GetTrustedInstaller to spawn cmd.exe with TrustedInstaller.exe as a Parent