I want to do this by just using memory and not using disk modification or a tool, in post exploitation of a remote system, i already know how to enable RDP but the problem is when a user is logged in i cannot log in
there is a method :
and i thought i can do it in memory and patch that instruction inside memory instead of disk, but found out SVCHOST processes have SYSTEM integrity and so i cannot inject into them and modify them
so how can this be done? any other way that i can do this without using any tool or disk modification?
EDIT : I'm not using a tool, its my own code, so is there any other way other than privilege escalation to SYSTEM? since that might not always be possible on windows 10. i thought maybe since its a task and not a process then there might be a trick to inject tasks or something