Skip to content
This repository was archived by the owner on Jan 21, 2021. It is now read-only.

Update Invoke-TokenManipulation.ps1#91

Merged
PowerShellMafia merged 2 commits intoPowerShellMafia:devfrom
FixTheExchange:patch-1
Dec 15, 2015
Merged

Update Invoke-TokenManipulation.ps1#91
PowerShellMafia merged 2 commits intoPowerShellMafia:devfrom
FixTheExchange:patch-1

Conversation

@FixTheExchange
Copy link
Copy Markdown
Contributor

Re-opening pull request to dev branch instead of master at request.

Windows 10 breaks the current version of Invoke-TokenManipulation.ps1 because wininit is now a protected processes. Rather than hardcoding to a specific process to obtain a SYSTEM token, it's better to enumerate all processes running as SYSTEM and find one that works. I have updated the script to version 1.12 and added logic on lines 1689-1694 to make sure it can successfully grab a SYSTEM token necessary to function

Windows 10 breaks the current version of Invoke-TokenManipulation.ps1 because wininit is now a protected processes.  Rather than hardcoding to a specific process to obtain a SYSTEM token, it's better to enumerate all processes running as SYSTEM and find one that works. I have updated the script to version 1.12 and added logic on lines 1689-1696 to make sure it can successfully grab a SYSTEM token necessary to function.
Removed 2 unnecessary lines.
PowerShellMafia pushed a commit that referenced this pull request Dec 15, 2015
Update Invoke-TokenManipulation.ps1 to address Win 10 incompatibility
@PowerShellMafia PowerShellMafia merged commit fef09e6 into PowerShellMafia:dev Dec 15, 2015
@PowerShellMafia
Copy link
Copy Markdown
Collaborator

This looks great. Thanks for the PR!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants