Token Stealer is based on Token Theft Attack, where it helps the Red Teamers to Steal the Access Token of a User, if a process is running in the context of Victim.
- OpenProcessToken
- LookupPrivilegeValueA
- AdjustTokenPrivileges
- OpenProcess
- DuplicateTokenEx
- CreateProcessWithTokenW
- First change the process name in the code . I have used the "Notepad.exe" in the Code.
- Compile the Program
- Use the executable
- The executable should be running in High Integrity Process , as an Administrator