OmriBaso/WTSImpersonator
WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"
PowerShellGPL-3.0
Stargazers
- 5l33m
- a7t0fwa7
- aweNousaku
- b33f00dSpace Dynamics Co.
- bopin2020Fairyland
- clod81Tier Zero Security
- cvesecurity
- darksh3llRU
- DemiOneA
- dur4ngSpain
- EsonhughEsonCloud
- expl0itabl3Northwave
- FilipposM@Hackcraft-Labs
- fly51flyPRIS
- hastalamuerte
- invokethreatguyToronto
- jaychouzzk
- johdcyber
- MaorSabagClalit Health Services
- mgeekyBinary-Offensive.com
- microwavestineSeoul
- mxrchHideAndSec
- nanaao
- nclvCalypt
- peteribi
- reveng007Seed
- ruppdeFRA
- sh1xobedroom
- sh4hin
- spaceghost-randori
- tingtho
- watson0x90
- xzxxzzzz000真実の不均衡株式会社
- y0sh1mitsuCSIRT Airbus Protect
- yakir2b
- zjicmDarkWing