Last active
February 1, 2020 13:27
-
-
Save shelld0n/6b62238b3bc46f01f2a340879591ad62 to your computer and use it in GitHub Desktop.
API_imports
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // see https://www.pinvoke.net/default.aspx/advapi32.openprocesstoken | |
| public const UInt32 STANDARD_RIGHTS_REQUIRED = 0x000F0000; | |
| public const UInt32 STANDARD_RIGHTS_READ = 0x00020000; | |
| public const UInt32 TOKEN_ASSIGN_PRIMARY = 0x0001; | |
| public const UInt32 TOKEN_DUPLICATE = 0x0002; | |
| public const UInt32 TOKEN_IMPERSONATE = 0x0004; | |
| public const UInt32 TOKEN_QUERY = 0x0008; | |
| public const UInt32 TOKEN_QUERY_SOURCE = 0x0010; | |
| public const UInt32 TOKEN_ADJUST_PRIVILEGES = 0x0020; | |
| public const UInt32 TOKEN_ADJUST_GROUPS = 0x0040; | |
| public const UInt32 TOKEN_ADJUST_DEFAULT = 0x0080; | |
| public const UInt32 TOKEN_ADJUST_SESSIONID = 0x0100; | |
| public const UInt32 TOKEN_READ = (STANDARD_RIGHTS_READ | TOKEN_QUERY); | |
| public const UInt32 TOKEN_ALL_ACCESS = (STANDARD_RIGHTS_REQUIRED | TOKEN_ASSIGN_PRIMARY | | |
| TOKEN_DUPLICATE | TOKEN_IMPERSONATE | TOKEN_QUERY | TOKEN_QUERY_SOURCE | | |
| TOKEN_ADJUST_PRIVILEGES | TOKEN_ADJUST_GROUPS | TOKEN_ADJUST_DEFAULT | | |
| TOKEN_ADJUST_SESSIONID); | |
| // GetCurrentProcess | |
| [DllImport("Kernel32.dll")] | |
| public static extern IntPtr GetCurrentProcess(); | |
| // OpenProcessToken | |
| [DllImport("advapi32.dll", SetLastError = true)] | |
| [return: MarshalAs(UnmanagedType.Bool)] | |
| public static extern bool OpenProcessToken(IntPtr ProcessHandle, | |
| UInt32 DesiredAccess, out IntPtr TokenHandle); | |
| // LookupPrivilegeValue | |
| [DllImport("advapi32.dll")] | |
| public static extern bool LookupPrivilegeValue(string lpSystemName, string lpName, out LUID lpLuid); |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment