windows PSExec 如何以 SYSTEM 用户身份运行应用程序?

声明:本页面是StackOverFlow热门问题的中英对照翻译,遵循CC BY-SA 4.0协议,如果您需要使用它,必须同样遵循CC BY-SA许可,注明原文地址和作者信息,同时你必须将它归于原作者(不是我):StackOverFlow 原文地址: http://stackoverflow.com/questions/7334542/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me): StackOverFlow

提示:将鼠标放在中文语句上可以显示对应的英文。显示中英文
时间:2020-09-15 18:01:36  来源:igfitidea点击:

How PSExec runs application as SYSTEM user?

windowswinapiwindows-servicescreateprocess

提问by TCS

I wondered how psexec.exe by sysinternals executes a process as a SYSTEM user. I need to run a tool under a SYSTEM process, but I don't really know how to do that without registering it as a service.

我想知道 sysinternals 的 psexec.exe 如何以 SYSTEM 用户身份执行进程。我需要在 SYSTEM 进程下运行一个工具,但我真的不知道如何在不将其注册为服务的情况下做到这一点。

Does anyone have an idea ?

有没有人有想法?

p.s. I would really prefer to do it with WINAPI (C++). Thanks! :-)

ps我真的更喜欢用WINAPI(C++)来做。谢谢!:-)

Thanks!

谢谢!

采纳答案by Jeremy McGee

psexecoperates by creating a phantom, behind-the-scenes Windows service named "psexesvc" that is then removed after the operation completes.

psexec通过创建一个名为“psexesvc”的虚拟幕后 Windows 服务进行操作,然后在操作完成后将其删除。

Details are here: http://www.windowsecurity.com/articles/PsExec-Nasty-Things-It-Can-Do.html

详细信息在这里:http: //www.windowsecurity.com/articles/PsExec-Nasty-Things-It-Can-Do.html

Perhaps your tool could call psexecto run a process?

也许你的工具可以调用psexec来运行一个进程?