admin/PowerShellMafia-PowerSploit
1
0
Fork 0
mirror of https://github.com/PowerShellMafia/PowerSploit synced 2026-06-08 12:13:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #19 from clymb3r/master

Browse Source 
Updated Invoke-TokenManipulation help
This commit is contained in:
Matt Graeber
2013-11-04 13:56:47 -08:00
parent 22f232920b 5af0589e8f
commit 20f0a5cd96
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Exfiltration/Invoke-TokenManipulation.ps1
+2 -2
View File
@@ -140,13 +140,13 @@ Spawns cmd.exe using the token belonging to thread ID 500.
.EXAMPLE
Get-Process lsass | Token-TokenManipulation -CreateProcess "cmd.exe"
Get-Process wininit | Invoke-TokenManipulation -CreateProcess "cmd.exe"
Spawns cmd.exe using the primary token of LSASS.exe. This pipes the output of Get-Process to the "-Process" parameter of the script.
.EXAMPLE
Get-Process lsass | Token-TokenManipulation -ImpersonateUser
Get-Process wininit | Invoke-TokenManipulation -ImpersonateUser
Makes the current thread impersonate the lsass security token.