Skip to content

This is a C# implementation of making a process/executable run as NT AUTHORITY/SYSTEM. This is achieved through parent ID spoofing of almost any SYSTEM process.

Notifications You must be signed in to change notification settings

py7hagoras/GetSystem

Repository files navigation

GetSystem

This is a C# implementation of making a process/executable run as NT AUTHORITY/SYSTEM. This is achieved through parent ID spoofing of almost any SYSTEM process. Helps avoid the use of PSEXEC which is closely monitored by Blue Team.

Usage:

GetSystem.exe

GetSystem.exe C:\Windows\System32\cmd.exe lsass

Showing run of GetSystem to spawn cmd.exe as SYSTEM with lsass as parent

About

This is a C# implementation of making a process/executable run as NT AUTHORITY/SYSTEM. This is achieved through parent ID spoofing of almost any SYSTEM process.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages