Save-Module -Name NtObjectManager -Path c:\test
Install-Module -Name NtObjectManager
Import-Module NtObjectManager
sc.exe start TrustedInstaller
Set-NtTokenPrivilege SeDebugPrivilege
$p = Get-NtProcess -Name TrustedInstaller.exe
$proc = New-Win32Process cmd.exe -CreationFlags NewConsole -ParentProcess $p
利用token获得TrustedInstaller权限
最新推荐文章于 2023-10-27 09:50:43 发布