diff options
| author | clymb3r <bialek.joseph@gmail.com> | 2013-11-04 08:19:28 -0800 |
|---|---|---|
| committer | clymb3r <bialek.joseph@gmail.com> | 2013-11-04 08:19:28 -0800 |
| commit | 5af0589e8f97aa49aef6bd083a00a4689c7553aa (patch) | |
| tree | a969cfa2a9ae84e4465b2a5c07f1dac01501c113 /Exfiltration | |
| parent | 7a6e8a0f208d19d2be19265f90b6e503b74143fa (diff) | |
| download | PowerSploit-5af0589e8f97aa49aef6bd083a00a4689c7553aa.tar.gz PowerSploit-5af0589e8f97aa49aef6bd083a00a4689c7553aa.zip | |
Updated Invoke-TokenManipulation help
Diffstat (limited to 'Exfiltration')
| -rw-r--r-- | Exfiltration/Invoke-TokenManipulation.ps1 | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/Exfiltration/Invoke-TokenManipulation.ps1 b/Exfiltration/Invoke-TokenManipulation.ps1 index affbc20..c692299 100644 --- a/Exfiltration/Invoke-TokenManipulation.ps1 +++ b/Exfiltration/Invoke-TokenManipulation.ps1 @@ -140,13 +140,13 @@ Spawns cmd.exe using the token belonging to thread ID 500. .EXAMPLE -Get-Process lsass | Token-TokenManipulation -CreateProcess "cmd.exe" +Get-Process wininit | Invoke-TokenManipulation -CreateProcess "cmd.exe" Spawns cmd.exe using the primary token of LSASS.exe. This pipes the output of Get-Process to the "-Process" parameter of the script. .EXAMPLE -Get-Process lsass | Token-TokenManipulation -ImpersonateUser +Get-Process wininit | Invoke-TokenManipulation -ImpersonateUser Makes the current thread impersonate the lsass security token. |