择录自WINDOWS源码的提权函数-优快云博客

本文列举了Windows系统中定义的各种特权标识符，并提供了一个简单的函数示例，用于启用指定的系统特权。这些特权包括创建令牌、提高配额限制、调试等关键操作。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

#define SE_MIN_WELL_KNOWN_PRIVILEGE    (2L)
#define SE_CREATE_TOKEN_PRIVILEGE       (2L)
#define SE_ASSIGNPRIMARYTOKEN_PRIVILEGE (3L)
#define SE_LOCK_MEMORY_PRIVILEGE       (4L)
#define SE_INCREASE_QUOTA_PRIVILEGE    (5L)

// end_wdm
//
// Unsolicited Input is obsolete and unused.
//

#define SE_UNSOLICITED_INPUT_PRIVILEGE (6L)

// begin_wdm
#define SE_MACHINE_ACCOUNT_PRIVILEGE    (6L)
#define SE_TCB_PRIVILEGE                (7L)
#define SE_SECURITY_PRIVILEGE          (8L)
#define SE_TAKE_OWNERSHIP_PRIVILEGE    (9L)
#define SE_LOAD_DRIVER_PRIVILEGE       (10L)
#define SE_SYSTEM_PROFILE_PRIVILEGE    (11L)
#define SE_SYSTEMTIME_PRIVILEGE          (12L)
#define SE_PROF_SINGLE_PROCESS_PRIVILEGE  (13L)
#define SE_INC_BASE_PRIORITY_PRIVILEGE (14L)
#define SE_CREATE_PAGEFILE_PRIVILEGE    (15L)
#define SE_CREATE_PERMANENT_PRIVILEGE    (16L)
#define SE_BACKUP_PRIVILEGE             (17L)
#define SE_RESTORE_PRIVILEGE             (18L)
#define SE_SHUTDOWN_PRIVILEGE          (19L)
#define SE_DEBUG_PRIVILEGE             (20L)
#define SE_AUDIT_PRIVILEGE             (21L)
#define SE_SYSTEM_ENVIRONMENT_PRIVILEGE (22L)
#define SE_CHANGE_NOTIFY_PRIVILEGE       (23L)
#define SE_REMOTE_SHUTDOWN_PRIVILEGE    (24L)
#define SE_UNDOCK_PRIVILEGE             (25L)
#define SE_SYNC_AGENT_PRIVILEGE          (26L)
#define SE_ENABLE_DELEGATION_PRIVILEGE (27L)
#define SE_MANAGE_VOLUME_PRIVILEGE       (28L)
#define SE_IMPERSONATE_PRIVILEGE       (29L)
#define SE_CREATE_GLOBAL_PRIVILEGE       (30L)
#define SE_MAX_WELL_KNOWN_PRIVILEGE    (SE_CREATE_GLOBAL_PRIVILEGE)
#define STATUS_NO_TOKEN                ((NTSTATUS)0xC000007CL)

BOOL EnablePrivilege(ULONG Privilege,BOOL Enable)
{
NTSTATUS Status;
BOOLEAN WasEnabled;
Status = RtlAdjustPrivilege(Privilege,
(BOOLEAN)Enable,
TRUE,
&WasEnabled);

if (Status == STATUS_NO_TOKEN) {

      Status = RtlAdjustPrivilege(Privilege,
(BOOLEAN)Enable,
FALSE,
&WasEnabled);
}

if (!NT_SUCCESS(Status))
{
      return(FALSE);
}
return(TRUE);
}