get_priv: add option to modify privileges in thread token #33
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Hi,
Recently I was in a situation where required to enable the permissions of an impersonated token, however get_priv only allows to modify the main token of the process, so I added an option to modify the thread token, which is the impersonated one.
For enabling privileges in process token the command remains the same, but in case you want to enable privileges in the thread token, you must prepend a ~ symbol in the name of the privilege.
For example, indicate "SeDebugPrivilege" will enable the debug privilege in process token and "~SeDebugPrivilege" will do it in the thread token.