Impersonating access tokens on Windows with meterpreter

load incognito
list_tokens -u

We can notice that the Administrator user token is available. Impersonate the Administrator user token and read the flag.

PreviousUAC Bypass: Memory Injection (Metasploit)NextPowerUp Privilege Escalation

Last updated