WIN32_API

Authentication

• runas
  • Purpose: Reproduce the Microsfot built-in tools Runas
  • API:
    • CreateProcessWithLogonW

Winlogon

• credentialPrompt
  • Purpose: Create a simple credential prompt
  • API:
    • CredUIPromptForCredentials (credui.lib)

Authorization

Access Token

• searchingSID

  • Purpose: Identifing whether the SID of the token is the well-known SID of the administrator group and whether it is enabled.
  • API
    • OpenProcessToken
    • GetTokenInformation
    • AllocateAndInitializeSid
    • EqualSid
    • LookupAccountSid

• TokenEnumeration

  • Purpose: Enumerate all information in the access token.

Privilege

• shutdown
  • Purpose: Enable the privilege SeShutdownPrivilege ( if already have it but disable ) and shut down the host.
  • API
    • GetProcAddress
    • RtlAdjustPrivilege(advapi32.lib)
    • ZwShutdownSystem