admin/jonny-jhnson-RandomPOCs

mirror of https://github.com/jonny-jhnson/RandomPOCs synced 2026-06-21 13:54:51 +00:00

T

Jonathan Johnson d6200be0e4 Delete .github/workflows directory

2023-05-01 21:09:27 -05:00

ImpersonateLoggedOnUser

Delete ImpersonateLoggedOnUser/.vs directory

2023-04-11 16:14:45 -05:00

NtfsControlFile

Delete NtfsControlFile/.vs/NtfsControlFile directory

2023-04-27 08:15:38 -05:00

SetThreadToken/SetThreadToken

Adding SetThreadToken

2023-04-14 10:12:50 -05:00

LICENSE

Initial commit

2023-04-11 15:38:34 -05:00

README.md

Adding NtfsControlFile

2023-04-27 07:54:51 -05:00

README.md

RandomPOCs

This repository holds POCs I have created for projects, blogs, etc.

POCs:

POC	Description
ImpersonateLoggedOnUser	Steals token from a targetted process and sets token to current thread via ImpersonateLoggedOnUser
SetThreadToken	Steals token from a targetted process and sets token to current thread via SetThreadToken
NtfsControlFile	Performs named pipe impersonation by creating a named pipe - `\\.\pipe\npfs` and taking the clients token by calling NtfsControlFile