# MSI-AlwaysInstallElevated

**Repository Path**: any3ite/MSI-AlwaysInstallElevated

## Basic Information

- **Project Name**: MSI-AlwaysInstallElevated
- **Description**: No description available
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2025-04-12
- **Last Updated**: 2025-04-12

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# MSI-AlwaysInstallElevated
A Collection of templates that can be used for abusing window's AlwaysInstallElevated policy



## WXS Templates

* **alwaysInstallElevated-1.wxs** 
    * a wxs template to execute system commands.
* **alwaysInstallElevated-2.wxs** 
    * a wxs template to execute command then intentionally fails so it won't be registered as an installed program.
* **alwaysInstallElevated-3.wxs** 
    * a wxs template to embed executable (exe) file into the msi package and execute it during installation.
* **alwaysInstallElevated-4.wxs** 
    * a wxs template combines the techniques of `alwaysInstallElevated-2` and `alwaysInstallElevated-3` templates.

### Instructions
#### Windows
1. Change the first `ExeCommand` variable to desired command  
2. Download the [WiX Toolset Binaries](https://github.com/wixtoolset/wix3/releases/tag/wix3112rtm)
3. Compile alwaysInstallElevated.msi by running:  
    `candle alwaysInstallElevated.wxs`  
    `light alwaysInstallElevated.wixobj`  
4. Execute on target by running:  
    `alwaysInstallElevated.msi /q`
    - or use `msiexec` implecitely 
        
        `msiexec /i alwaysInstallElevated.msi /qn`
    - To uninstall it
        
        `msiexec /x alwaysInstallElevated.msi /qn`

#### Linux
1. Change the first 
2. Install wixl package
    ```
    sudo apt install wixl
    ```
3. Compile the `.wsx` file
    ```
    wixl -v options.wsx -o alwaysInstallElevated.msi
    ```
4. Execute on target by running:  
    `alwaysInstallElevated.msi /q`
    - or use `msiexec` implecitely 
        
        `msiexec /i alwaysInstallElevated.msi /qn`
    - To uninstall it
        
        `msiexec /x alwaysInstallElevated.msi /qn`