A Proof of Concept of opening any program (in this case, CMD) as TrustedInstaller in Rust using windows and windows-service crates.
This is a Proof of Concept and should not be used for malicious purposes.
- Download the latest release from the latest release or build it yourself. Then, run the executable.
- The program will open a UAC prompt if you are not running as Administrator. Accept the prompt.
- The program will then open CMD as TrustedInstaller.
To build this project, you need to have Rust, VS Build Tools and the Windows SDK installed.
To build the project, run the following command:
cargo build --release
You can visit the blog from FourCoreLabs to learn how it works.
This was inspired by Go PoC by FourCoreLabs