0xbadjuju / Tokenvator

A tool to elevate privilege with Windows Tokens

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

TrustedInstaller?

ci70 opened this issue · comments

commented

Can it steal token from TI?

Yes, this is possible, there is a built-in function called GetTrustedInstaller.

You can find it documented in the wiki here:
https://github.com/0xbadjuju/Tokenvator/wiki/Stealing-Tokens#gettrustedinstaller