RandomPOCs

This repository holds POCs I have created for projects, blogs, etc.

POCs:

POC	Description
ImpersonateLoggedOnUser	Steals token from a targetted process and sets token to current thread via ImpersonateLoggedOnUser
SetThreadToken	Steals token from a targetted process and sets token to current thread via SetThreadToken
NtfsControlFile	Performs named pipe impersonation by creating a named pipe - \\.\pipe\npfs and taking the clients token by calling NtfsControlFile
CreateProcessSetThreadToken	Creates a process then sets the thread token to impersonate
InjectImp	Creates a remote thread in a target process then sets the thread token to impersonate
SuspendThreadDriver	Client for the vulnerable driver - gmer64.sys. Suspends threads given a ThreadId
LDAPPatch	Patches EtwEventWrite so that LDAP calls don't get logged
TokenActions	Provides various ways to impersonate tokens and to attempt to change token session ids
WSLHook	Leverages RTTI to hook ILxssUserSession::CreateLxProcess method