Skip to content

Instantly share code, notes, and snippets.

View dfirence's full-sized avatar
💭
Sketching

dfirence dfirence

💭
Sketching
View GitHub Profile
@dfirence
dfirence / UAC-TokenMagic.ps1
Created July 17, 2021 17:59 — forked from Cr4sh/UAC-TokenMagic.ps1
UAC Token Magic
function UAC-TokenMagic {
<#
.SYNOPSIS
Based on James Forshaw's three part post on UAC, linked below, and possibly a technique
used by the CIA!
Essentially we duplicate the token of an elevated process, lower it's mandatory
integrity level, use it to create a new restricted token, impersonate it and
use the Secondary Logon service to spawn a new process with High IL. Like
playing hide-and-go-seek with tokens! ;))
@dfirence
dfirence / Email Server (Windows Only).md
Created June 2, 2020 23:39 — forked from raelgc/Email Server (Windows Only).md
Setup a Local Only Email Server (Windows Only)