SharpImpersonation

SharpImpersonation This was a learning by doing project from my side. Well known techniques are used to built just another impersonation tool with some improvements in comparison to other public tools. The code base was taken from: https://github.com/0xbadjuju/Tokenvator A blog post for the...

impersonate-rs

IRS Impersonate-RS 💡 IRS 是 https://github.com/zblurx/impersonate-rs 的一个库版本，作者 zblurx 用纯 Rust 重新实现了 Defte 的 Impersonate。更多相关信息，请参阅这篇 博客文章。 令牌模拟的方法与 Defte 的 Impersonate 略有不同：在这里，你必须选择一个 PID，并针对该 PID 中的主令牌进行模拟，然后 irs.exe 将： 1. 复制令牌 2. 创建命名管道（用于获取命令输出） 3. 通过 CreateProcessWithTokenW...

JuicyPotatoNG

JuicyPotatoNG 又一个从服务账户到系统的 Windows 本地权限提升工具。完整详情见 -- https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/ 用法 root@kitploit: JuicyPotatoNG by decoderit & splintercode Mandatory args: -t createprocess call: CreateProcessWithTokenW, CreateProcessAsUser, try both -p :...

MultiPotato - Another Potato to get SYSTEM via SeImpersonate privileges

First of all - credit to @splintercode & @decoderit for RoguePotato as this code heavily bases on it. This is just another Potato to get SYSTEM via SeImpersonate privileges. But this one is different in terms of It doesn't contain any SYSTEM auth trigger for weaponization. Instead the code can be...