Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

seems to fail in impersonate local service #1

Open
ricnar456 opened this issue May 20, 2024 · 3 comments
Open

seems to fail in impersonate local service #1

ricnar456 opened this issue May 20, 2024 · 3 comments

Comments

@ricnar456
Copy link

error 0xc0000022 when tries to open the driver handle.
@ricnar456 ricnar456 changed the title seems to fail in impresonate local service seems to fail in impersonate local service May 20, 2024
@ricnar456
Copy link
Author

Is needed some special local service running in the machine? i have a lot of svchost local services running but it fails when tries ti impersonate them.

@b1scoito
Copy link
Collaborator

You only need to have the appid.sys service running in order for this to work. Please verify if your Windows version is older than the patch made by MSRC: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338

@b1scoito b1scoito mentioned this issue Jun 2, 2024
Closed
@sec13b
Copy link

sec13b commented Dec 4, 2024

Compile only on a machine where the "appid.sys" driver is present ? Correct?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@ricnar456 @b1scoito @sec13b