SharpImpersonation - A User Impersonation Tool - Via Token Or Shellcode Injection

Web: http://www.kitploit.com/2022/09/sharpimpersonation-user-impersonation.html

This was a learning by doing project from my side. Well known techniques are used to built just another impersonation tool with some improvements in comparison to other public tools. The code base was taken from:

• https://github.com/0xbadjuju/Tokenvator

A blog post for the intruduction can be found here:

• https://s3cur3th1ssh1t.github.io/SharpImpersonation-Introduction/

List user processes

PS > PS C:\temp> SharpImpersonation.exe list

List only elevated processes

PS > PS C:\temp> SharpImpersonation.exe list elevated

Impersonate the first process of the target user to start a new …

impersonation injection sharpimpersonation shellcode shellcode injection token tool webserver