admin/PowerShellMafia-PowerSploit
1
0
Fork 0
mirror of https://github.com/PowerShellMafia/PowerSploit synced 2026-06-08 12:13:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Updated Invoke-TokenManipulation help

Browse Source
This commit is contained in:
clymb3r
2013-11-04 08:19:28 -08:00
parent 7a6e8a0f20
commit 5af0589e8f
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Exfiltration/Invoke-TokenManipulation.ps1
+2 -2
View File
@@ -140,13 +140,13 @@ Spawns cmd.exe using the token belonging to thread ID 500.
.EXAMPLE
Get-Process lsass | Token-TokenManipulation -CreateProcess "cmd.exe"
Get-Process wininit | Invoke-TokenManipulation -CreateProcess "cmd.exe"
Spawns cmd.exe using the primary token of LSASS.exe. This pipes the output of Get-Process to the "-Process" parameter of the script.
.EXAMPLE
Get-Process lsass | Token-TokenManipulation -ImpersonateUser
Get-Process wininit | Invoke-TokenManipulation -ImpersonateUser
Makes the current thread impersonate the lsass security token.