To test a list of CLSIDs use test_clsid.bat.
NOTE All our tests were conducted impersonating the NT AUTHORITY\LOCAL SERVICE
. To have a shell as NT AUTHORITY\Local Service
, use psexec
(as Administrator)
.\PsExec64.exe -i -u "nt authority\local service" cmd.exe
Some CLSIDs impersonate the current logged-in user in first session, interesting if the DA is logged in ;-)