Gsudo

gsudo is a command-line utility for Windows that elevates any command with administrator privileges directly from the current console window. It functions as a sudo-style tool, detecting the active shell environment—whether CMD, PowerShell, WSL, or Bash—and running the elevated command natively within that shell without spawning a new window. The tool preserves full console features including colors, keyboard input, auto-completion, and I/O redirection during elevated execution.

A key differentiator is gsudo's credential caching system, which stores UAC-approved tokens in a background daemon so repeated elevation requests show only one authorization prompt until a configurable timeout expires. The tool supports multiple elevation modes, including named-pipe token switching for full console support and token duplication to avoid new UAC prompts. Users can also launch processes under specific user accounts, the system account, or TrustedInstaller with configurable integrity levels.

gsudo provides a JSON-based configuration store for persisting settings like cache mode, timeout, and log verbosity. It includes shortcut syntax for re-running the last command elevated, supports script execution with proper exit code handling, and can create elevated Windows Terminal profiles. The tool also reports elevation status and cache session activity for monitoring purposes.

Features

Cross-Shell Elevators - Detects the active shell environment and runs elevated commands natively within CMD, PowerShell, WSL, or Bash without spawning a new window.
Elevation Utilities - Elevates shell commands in CMD, PowerShell, and WSL while preserving console features and I/O.
Shell Elevation Sessions - Elevates the entire current shell session in the same console window, preserving working directory and environment.
Console-Preserving Elevations - gsudo executes a command as administrator in the current console window, preserving full console features like colors and keyboard input.
Credential Cache Daemons - Runs a background daemon that caches UAC tokens to suppress repeated elevation prompts.
File and Console I/O - Maintains full console capabilities like colors, keyboard input, auto-completion, and I/O redirection during elevation.
Shell Environment Detection - Identifies the active shell environment at runtime to run elevated commands natively within that shell.
Multi-Shell Elevation - Detects the active shell and runs elevated commands natively within CMD, PowerShell, WSL, and Bash.
Process Privilege Elevation - Elevates the entire current shell session by running gsudo without arguments, a core privilege elevation capability.
Console-Attached Elevation - Attaches elevated processes to the caller's console window, preserving full terminal features.
Windows Sudo Elevators - Runs commands with administrator privileges from any Windows shell, preserving console features and caching credentials to reduce UAC prompts.
Authentication Token Caching - Caches authentication tokens locally so repeated elevation requests show only one UAC prompt until timeout.
UAC Credential Caches - Caches UAC-approved tokens so repeated elevation requests show only one authorization prompt until the cache expires.
Administrative Command Engines - Executes privileged system commands with administrator rights across multiple shell types in the current console.
Cache Behavior Configurators - Sets the cache to start automatically, only on explicit request, or remain disabled for all elevations.
Bash Shell Elevations - Prepends gsudo to run a command with administrator privileges from within a Bash for Windows shell.
PowerShell Wrapped Elevations - Wraps a command with Invoke-gsudo to pass variables, credentials, and profile context using familiar PowerShell syntax.
Token Switching via Named Pipes - Duplicates access tokens across named pipes to elevate processes without spawning a new window.
Named Pipe - Ships a named-pipe elevation mode that redirects I/O for elevated processes at the cost of keyboard support.
Configurable Integrity Levels - Provides configurable integrity levels for launching processes as System or TrustedInstaller.
Integrity Level Switches - Launches processes under specified user accounts, system accounts, or TrustedInstaller with configurable integrity levels.
Integrity Level Switches - Launches processes under specified user accounts, system accounts, or TrustedInstaller with configurable integrity levels.
CMD Command Elevations - Runs a non-PowerShell command with elevated privileges using the -d flag to avoid spawning a new PowerShell instance.
Same-Console Elevations - Runs a program with administrator privileges while keeping the elevated process attached to the current console window for seamless interaction.
Token Duplication Elevation - Duplicates security tokens from already-elevated processes to avoid new UAC prompts.
Process Launchers Under Specific Identities - Launches processes under specified user accounts, system account, or TrustedInstaller with configurable integrity levels.
Command Execution Under User Identity - Executes commands under a different user account with appropriate permissions, matching the command execution under user identity concept.
Cache Duration Configurations - gsudo limits how long an idle elevated session remains open before it automatically closes.
Cache Mode Configurators - gsudo sets the cache mode to automatic, explicit, or disabled to control when UAC prompts appear for elevation.
Cache Session Lifecycles - gsudo starts or stops a credential cache manually and specifies which process or idle timeout governs the session.
PowerShell Command Elevations - Runs a command or script block in an elevated PowerShell session, preserving console output and pipeline context.
Credential Cache Session Terminations - Provides a command to kill all cached elevated sessions, forcing fresh UAC prompts on next elevation.
Command Line Tools - Sudo equivalent for running commands with elevated permissions.
System Administration Tools - Elevated command execution for Windows terminals.

mas-cli/mas

12,235View on GitHub

This project provides a command-line interface for managing the lifecycle of applications from the Apple App Store. It functions as a package manager for macOS, enabling users to search for software, install new applications, and maintain existing installations directly through terminal commands. The tool distinguishes itself by wrapping private system APIs to perform store operations that are typically restricted to the graphical user interface. It integrates with the operating system to handle administrative privilege elevation, allowing for secure, automated modifications to protected appl

gdamore/tcell

5,076View on GitHub

tcell is a Go terminal user interface library and framework for building cell-based applications. It functions as a terminal emulator backend and input processor, utilizing a change-based diffing engine to manage screen state and efficiently render updates. The project is distinguished by its pluggable backend abstraction, which allows terminal interfaces to be rendered across physical terminals or compiled into WebAssembly for web browser display. It provides a virtual screen simulation to enable programmatic event injection and output inspection for automated application testing. Its capab

microsoft/sudo

5,842View on GitHub

Sudo is a Windows command line utility and privilege escalation tool designed to execute individual commands with administrative privileges from an existing terminal session. It acts as an administrative access wrapper that allows specific processes to run as an administrator without requiring the user to manually open a new administrative window. The tool integrates administrative tasks directly into the Windows command line workflow, enabling the management of system configurations and protected files while maintaining the current terminal context. It facilitates elevated command execution

saltstack/salt

15,237View on GitHub

Salt is an infrastructure configuration management tool and orchestration framework designed for large-scale system administration. It functions as a remote execution engine that enables administrators to manage, provision, and enforce declarative states across distributed fleets of servers from a central control point. By utilizing a high-performance message bus, the platform allows for the simultaneous execution of administrative tasks and the maintenance of consistent software configurations across thousands of nodes. The system distinguishes itself through a flexible architecture that sup

gerardoggsudo

Features