RunasCs
RunasCs copied to clipboard
RunasCs - Csharp and open version of windows builtin runas.exe
The current implementation of EnableAllPrivileges() enable a list of hardcoded privileges by their names. The code should be refactored to dynamically retrieves the privileges from the token leveraging the function...
There is a bug in the function GetTokenIntegrityLevel function which will never returns a SYSTEM IL for a token. While this should be never problematic due to the fact logon...
Hello, It often happens to me, when the function `AccessToken.GetTokenPrivileges` is called, that I receive an AccessViolation Exception ``` Description: The process was terminated due to an unhandled exception. Exception...
Hi, while trying to use RunasCs on a HackTheBox machine I came across this error. ```py *Evil-WinRM* PS C:\> .\RunasCs.exe user password "cmd /c echo test > C:\test" -domain domain.local...
The IsLimitedUserLogon function is a useful feature that suggests if other more powerful logon are available to the user. The current logic first check some token properties like TokenElevation and...
There are some issues when running the --bypass-uac flag while running from a WinRM shell. It's not clear if the issue is related to winrm itself or 3rd party tools...
When a user interface occurs with --bypass-uac, its like an old version of windows like 98. Is there any solution? Thanks.
First, thanks for sharing this project! It's one of only a few available Windows "run as" implementations online. I've managed to use `RunAs.exe` to authenticate and start processes using both...
And add instructions for how [PsExec](https://learn.microsoft.com/en-us/sysinternals/downloads/psexec) can be used to obtain it though the inbuild System account.
No crazy changes at all, just fixing compile errors. I am by no means a C# dev, so if I did something silly I apologize in advance, I just wanted...