以提升的权限打开命令行程序

Question

I am currently writing a DLL injection program (C++) which adds specified certificate to certmgr.exe .

I wrote the whole thing connected with injection ( OpenProcess , etc.). When I am executing it - attached to svchost - my DLL is not loading since it seems that it doesn't have such rights as svchost has.

How can I pass rights?

In my DLL file, I am using system("certmgr.exe -add ....") and I think this might be the problem because the command line opens as a separate program (as if I opened it via start ).

Answer 1

Use ShellExecute() using the "runas" argument, which will make it try to run as administrator

ShellExecuteA( NULL, 
    "runas",  
    "c:\\windows\\certmgr.exe",  
    "-add ....",     
    NULL,                 
    SW_SHOWNORMAL  
);