Projects STRLCPY nanorobeus Commits a7ab668c
🤬
Revision indexing in progress... (symbol navigation in revisions will be accurate after indexed)
  • ■ ■ ■ ■ ■ ■
    include/bofdefs.h
    skipped 57 lines
    58 58  WINADVAPI WINBOOL WINAPI ADVAPI32$RevertToSelf();
    59 59  WINADVAPI WINBOOL WINAPI ADVAPI32$OpenThreadToken(HANDLE ThreadHandle, DWORD DesiredAccess, BOOL OpenAsSelf,
    60 60   PHANDLE TokenHandle);
     61 +WINADVAPI WINBOOL WINAPI ADVAPI32$CheckTokenMembership(HANDLE TokenHandle, PSID SidToCheck, PBOOL IsMember);
    61 62   
    62 63  // secur32
    63 64  WINBASEAPI NTSTATUS WINAPI SECUR32$LsaGetLogonSessionData(PLUID LogonId,
    skipped 47 lines
    111 112  #define ADVAPI32$LsaNtStatusToWinError LsaNtStatusToWinError
    112 113  #define ADVAPI32$RevertToSelf RevertToSelf
    113 114  #define ADVAPI32$OpenThreadToken OpenThreadToken
     115 +#define ADVAPI32$CheckTokenMembership CheckTokenMembership
    114 116   
    115 117  #define SECUR32$LsaGetLogonSessionData LsaGetLogonSessionData
    116 118  #define SECUR32$LsaFreeReturnBuffer LsaFreeReturnBuffer
    skipped 7 lines
  • ■ ■ ■ ■ ■ ■
    source/common.c
    skipped 85 lines
    86 86  }
    87 87   
    88 88  BOOL IsHighIntegrity(HANDLE TokenHandle) {
    89  - TOKEN_ELEVATION elevation;
    90  - DWORD dwSize;
    91  - 
    92  - if (ADVAPI32$GetTokenInformation(TokenHandle, TokenElevation, &elevation, sizeof(elevation), &dwSize)) {
    93  - return elevation.TokenIsElevated;
     89 + BOOL b;
     90 + SID_IDENTIFIER_AUTHORITY NtAuthority = SECURITY_NT_AUTHORITY;
     91 + PSID AdministratorsGroup;
     92 + b = ADVAPI32$AllocateAndInitializeSid(&NtAuthority, 2, SECURITY_BUILTIN_DOMAIN_RID, DOMAIN_ALIAS_RID_ADMINS, 0, 0,
     93 + 0, 0, 0, 0, &AdministratorsGroup);
     94 + if (b) {
     95 + if (!ADVAPI32$CheckTokenMembership(NULL, AdministratorsGroup, &b)) {
     96 + b = FALSE;
     97 + }
     98 + ADVAPI32$FreeSid(AdministratorsGroup);
    94 99   }
    95  - return FALSE;
     100 + 
     101 + return b;
    96 102  }
    97 103   
    98 104  BOOL IsSystem(HANDLE TokenHandle) {
    skipped 166 lines
Please wait...
Page is in error, reload to recover