Skip to content
This repository was archived by the owner on Jan 21, 2021. It is now read-only.

Commit 5af0589

Browse files
committed
Updated Invoke-TokenManipulation help
1 parent 7a6e8a0 commit 5af0589

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

Exfiltration/Invoke-TokenManipulation.ps1

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -140,13 +140,13 @@ Spawns cmd.exe using the token belonging to thread ID 500.
140140
141141
.EXAMPLE
142142
143-
Get-Process lsass | Token-TokenManipulation -CreateProcess "cmd.exe"
143+
Get-Process wininit | Invoke-TokenManipulation -CreateProcess "cmd.exe"
144144
145145
Spawns cmd.exe using the primary token of LSASS.exe. This pipes the output of Get-Process to the "-Process" parameter of the script.
146146
147147
.EXAMPLE
148148
149-
Get-Process lsass | Token-TokenManipulation -ImpersonateUser
149+
Get-Process wininit | Invoke-TokenManipulation -ImpersonateUser
150150
151151
Makes the current thread impersonate the lsass security token.
152152

0 commit comments

Comments
 (0)