{"id":13841312,"url":"https://github.com/yanghaoi/LaunchSystemCmd","last_synced_at":"2025-07-11T12:31:01.875Z","repository":{"id":56784032,"uuid":"433503976","full_name":"yanghaoi/LaunchSystemCmd","owner":"yanghaoi","description":"在权限足够的情况下弹出system权限的cmd命令行，包含exe和dll两种文件类型，可用于一些可能存在本地提权漏洞的测试。","archived":false,"fork":false,"pushed_at":"2022-04-07T18:46:41.000Z","size":1056,"stargazers_count":30,"open_issues_count":0,"forks_count":2,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-08-05T17:27:09.271Z","etag":null,"topics":["local-privilege-escalation","system-cmd-gui"],"latest_commit_sha":null,"homepage":"","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/yanghaoi.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-11-30T16:29:12.000Z","updated_at":"2024-06-07T14:59:26.000Z","dependencies_parsed_at":"2022-08-16T03:30:21.612Z","dependency_job_id":null,"html_url":"https://github.com/yanghaoi/LaunchSystemCmd","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/yanghaoi%2FLaunchSystemCmd","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/yanghaoi%2FLaunchSystemCmd/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/yanghaoi%2FLaunchSystemCmd/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/yanghaoi%2FLaunchSystemCmd/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/yanghaoi","download_url":"https://codeload.github.com/yanghaoi/LaunchSystemCmd/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225720398,"owners_count":17513596,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["local-privilege-escalation","system-cmd-gui"],"created_at":"2024-08-04T17:01:08.187Z","updated_at":"2024-11-21T11:30:33.903Z","avatar_url":"https://github.com/yanghaoi.png","language":"C++","funding_links":[],"categories":["C++"],"sub_categories":[],"readme":"# LaunchSystemCmdExe\r\nlaunch a cmd.exe process with system permissions.\r\n\r\n### launch cmd.exe in Session 0 \r\nWTSGetActiveConsoleSessionId() / ProcessIdToSessionId() / DuplicateTokenEx() / WTSEnumerateSessions() / CreateProcessAsUser()\r\n\r\n### Injetc session\u003e0(gui system process)\r\nZwCreateThreadEx() / CreateRemoteThread()\r\n\r\n### Set Parent\r\nCreateProcessA()\r\n\r\n### GIF Show\r\n![](https://cdn.jsdelivr.net/gh/yanghaoi/LaunchSystemCmd/LaunchSystemCmdExe/Images/run.gif)\r\n\r\n# LaunchSystemCmdDll\r\nSystem Process Dll Hijack Test :) , Command line:\r\n  ```markdown\r\n  rundll32 LaunchSystemCmdDll.dll,Run\r\n  ```\r\n\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fyanghaoi%2FLaunchSystemCmd","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fyanghaoi%2FLaunchSystemCmd","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fyanghaoi%2FLaunchSystemCmd/lists"}