三个给进程提权的方法 （c/cpp）

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121

三个给进程提权的方法   方法一：   C/C++ code   bool EnableDebugPrivilege()   {       HANDLE hToken;       LUID sedebugnameValue;       TOKEN_PRIVILEGES tkp;       if (!OpenProcessToken(GetCurrentProcess(), TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken))     {           return   FALSE;       }       if (!LookupPrivilegeValue(NULL, SE_DEBUG_NAME, &sedebugnameValue))      {           CloseHandle(hToken);           return false;       }       tkp.PrivilegeCount = 1;       tkp.Privileges[0].Luid = sedebugnameValue;       tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;       if (!AdjustTokenPrivileges(hToken, FALSE, &tkp, sizeof(tkp), NULL, NULL))     {           CloseHandle(hToken);           return false;       }       return true;   }         方法二：   C/C++ code   bool UpPrivilege()   {       HANDLE hToken;                             //   handle   to   process   token       TOKEN_PRIVILEGES tkp;               //   pointer   to   token   structure       bool result = OpenProcessToken(GetCurrentProcess(),           TOKEN_ADJUST_PRIVILEGES|TOKEN_QUERY,             &hToken);       if(!result)         //打开进程错误           return result;       result   =   LookupPrivilegeValue(     NULL,             SE_DEBUG_NAME,           &tkp.Privileges[0].Luid);       if(!result)         //查看进程权限错误           return   result;       tkp.PrivilegeCount   =   1;     //   one   privilege   to   set       tkp.Privileges[0].Attributes   =   SE_PRIVILEGE_ENABLED;       result   =   AdjustTokenPrivileges(   hToken,             FALSE,             &tkp,             sizeof(TOKEN_PRIVILEGES),           (PTOKEN_PRIVILEGES)   NULL,             (PDWORD)   NULL);       return   result;   }       方法三：   C/C++ code   #define SE_CREATE_TOKEN_NAME              TEXT("SeCreateTokenPrivilege") #define SE_ASSIGNPRIMARYTOKEN_NAME        TEXT("SeAssignPrimaryTokenPrivilege") #define SE_LOCK_MEMORY_NAME               TEXT("SeLockMemoryPrivilege") #define SE_INCREASE_QUOTA_NAME            TEXT("SeIncreaseQuotaPrivilege") #define SE_UNSOLICITED_INPUT_NAME         TEXT("SeUnsolicitedInputPrivilege") #define SE_MACHINE_ACCOUNT_NAME           TEXT("SeMachineAccountPrivilege") #define SE_TCB_NAME                       TEXT("SeTcbPrivilege") #define SE_SECURITY_NAME                  TEXT("SeSecurityPrivilege") #define SE_TAKE_OWNERSHIP_NAME            TEXT("SeTakeOwnershipPrivilege") #define SE_LOAD_DRIVER_NAME               TEXT("SeLoadDriverPrivilege") #define SE_SYSTEM_PROFILE_NAME            TEXT("SeSystemProfilePrivilege") #define SE_SYSTEMTIME_NAME                TEXT("SeSystemtimePrivilege") #define SE_PROF_SINGLE_PROCESS_NAME       TEXT("SeProfileSingleProcessPrivilege") #define SE_INC_BASE_PRIORITY_NAME         TEXT("SeIncreaseBasePriorityPrivilege") #define SE_CREATE_PAGEFILE_NAME           TEXT("SeCreatePagefilePrivilege") #define SE_CREATE_PERMANENT_NAME          TEXT("SeCreatePermanentPrivilege") #define SE_BACKUP_NAME                    TEXT("SeBackupPrivilege") #define SE_RESTORE_NAME                   TEXT("SeRestorePrivilege") #define SE_SHUTDOWN_NAME                  TEXT("SeShutdownPrivilege") #define SE_DEBUG_NAME                     TEXT("SeDebugPrivilege") #define SE_AUDIT_NAME                     TEXT("SeAuditPrivilege") #define SE_SYSTEM_ENVIRONMENT_NAME        TEXT("SeSystemEnvironmentPrivilege") #define SE_CHANGE_NOTIFY_NAME             TEXT("SeChangeNotifyPrivilege") #define SE_REMOTE_SHUTDOWN_NAME           TEXT("SeRemoteShutdownPrivilege") #define SE_UNDOCK_NAME                    TEXT("SeUndockPrivilege") #define SE_SYNC_AGENT_NAME                TEXT("SeSyncAgentPrivilege") #define SE_ENABLE_DELEGATION_NAME         TEXT("SeEnableDelegationPrivilege") #define SE_MANAGE_VOLUME_NAME             TEXT("SeManageVolumePrivilege")   BOOL EnablePrivilege(LPCTSTR lpszPrivilegeName,BOOL bEnable) {     HANDLE hToken;     TOKEN_PRIVILEGES tp;     LUID luid;           if(!OpenProcessToken(GetCurrentProcess(),TOKEN_ADJUST_PRIVILEGES |         TOKEN_QUERY | TOKEN_READ,&hToken))         return FALSE;     if(!LookupPrivilegeValue(NULL, lpszPrivilegeName, &luid))         return TRUE;           tp.PrivilegeCount = 1;     tp.Privileges[0].Luid = luid;     tp.Privileges[0].Attributes = (bEnable) ? SE_PRIVILEGE_ENABLED : 0;           AdjustTokenPrivileges(hToken,FALSE,&tp,NULL,NULL,NULL);           CloseHandle(hToken);           return (GetLastError() == ERROR_SUCCESS);       }