riicli

windows privesc + recon in rust

build

cargo build --target x86_64-pc-windows-gnu 

how to use

.\riicli.exe --help

features - privesc

• User Has Local Admin
• User In Local Admin Group
• Get Process Token Privileges
• Get Unquoted Service Paths
• Set Service Binary Path
• Get Modifiable Services
• Add/Remove token handle perms
• Get all SIDs with perms to modify path

useful links

• Rust for Windows docs
• ACE types + flags
• Service Access Rights

references

• WMI Crate
• PowerSploit
• PEASS-ng