[opsec]

Hello everyone,

I am currently looking for a way to start my malware at startup. I have multiple different methods but they are all very hard to refud them. Any suggestions for what I should use? Don’t bother commenting unless you reference resources (do not be a gatekeeper) (many such cases within the developer community). I currently use task scheduler with a wrapper for the win api and this worked but I can not refud it now.

[SaketSaket]

try checking this... this might help you...

https://docs.microsoft.com/en-us/dotnet/...mework-4.8

you can do like this...

PHP Code


<?php 
System.Security.Principal.WindowsIdentity identity = System.Security.Principal.WindowsIdentity.GetCurrent();
            string userName = identity.Name;

            System.Security.Principal.WindowsImpersonationContext impersonationContext = null;
            try
            {
                impersonationContext = identity.Impersonate();
            }
            finally
            {
                if (impersonationContext != null)
                {
                    impersonationContext.Undo();
                }
            } 


Regards
Saket

[benio2]

try checking this... this might help you...

https://docs.microsoft.com/en-us/dotnet/...mework-4.8

you can do like this...

PHP Code


<?php 
System.Security.Principal.WindowsIdentity identity = System.Security.Principal.WindowsIdentity.GetCurrent();
            string userName = identity.Name;

            System.Security.Principal.WindowsImpersonationContext impersonationContext = null;
            try
            {
                impersonationContext = identity.Impersonate();
            }
            finally
            {
                if (impersonationContext != null)
                {
                    impersonationContext.Undo();
                }
            } 


Regards
Saket

This guy is not looking for an access token impersonation technique. The skid is actually trying to get a FUD startup method like we're going to spoonfeed him techniques while he jerks off and talks shit asking for references. How about google first of all.

You're not going to bypass shit with registry keys, how about that. This information should tell you enough to figure out what to do next. I'm not providing you with a reference, fuck you OP.