attl4s

How curious Here's where Covenant is running (git clonned today) > .NET Core SDK (reflecting any global.json): > Version: 2.2.300 > Commit: 73efd5bd87 > > Runtime Environment: > OS Name:...

Hi again Ryan! Microsoft Windows 10 Enterprise (Evaluation) - The LOGON32_LOGON_INTERACTIVE seems to work properly here as well. - But Shellcmd fails for me again  I'm gonna keep digging...

> Host Name: WS04 > OS Name: Microsoft Windows 10 Enterprise Evaluation > OS Version: 10.0.18362 N/A Build 18362 > OS Manufacturer: Microsoft Corporation

AWESOME! I'll take a look tomorrow and let you know. Thank you Ryan!!

Hi again! I've been trying the new CreateProcessWithToken and these are the results: ### Working like a charm in high integrity contexts:  ### Failing in medium integrity contexts: ...

Souds like the perfect solution! I didn't notice the hToken within that call :P

+1 this. In addition, would be awesome to have a socksproxy functionality.