Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement impersonation possibilities for DCOM connections #1823

Open
0xShkk opened this issue Oct 5, 2024 · 0 comments
Open

Implement impersonation possibilities for DCOM connections #1823

0xShkk opened this issue Oct 5, 2024 · 0 comments
Labels
enhancement Implemented features can be improved or revised

Comments

@0xShkk
Copy link

0xShkk commented Oct 5, 2024

Configuration

impacket version: v0.12.0
Python version: 3.11
Target OS: Windows 10

It would be great to be able to specify the impersonation level when dealing with WMI connections. For this, the WMI context needs to be adjustable to use RPC_C_IMP_LEVEL_IMPERSONATE, as described in com-impersonation-level-constants. For example, when using PowerShell with WMI it is possible to impersonate SYSTEM by doing

Get-WmiObject -Namespace "root\cimv2" -Class Win32_Process -Impersonation 3 -ComputerName Computer_B

This must be possible for remote connections as well, similar to beeing able to specify the auth level.

Additional context

When a WMI connection is established, one is not performing actions as SYSTEM when the RPC_C_IMP_LEVEL_IMPERSONATE is not set.

@anadrianmanrique anadrianmanrique added the enhancement Implemented features can be improved or revised label Oct 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Implemented features can be improved or revised
Projects
None yet
Development

No branches or pull requests

2 participants