PrototypeCommon
OmriBaso/WTSImpersonator
WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"
- Owner
- OmriBaso (personal account)
- Stars
- Stars: 121
- Forks
- Forks: 16
- Language
- PowerShell
- License
- GPL-3.0
- Created
- 2023
- Tier
- Prototype (100 to 249 ★) What this tier means
More repos by OmriBaso
All 3 repos by OmriBaso- OmriBaso/RToolZStars: 326CAlpha
- OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-ExploitStars: 108C#Prototype
Nearby in PowerShell
All PowerShell repos- ztrhgf/useful_powershell_modulesStars: 121PowerShellPrototype
- neo0oen619/neo_multiseatStars: 121PowerShellPrototype
- gbulog/pcairplayStars: 121PowerShellPrototype
- janikvonrotz/PowerShell-PowerUpStars: 121PowerShellPrototype
- ligershark/psbuildStars: 121PowerShellPrototype
- bottkars/vmxtoolkitStars: 121PowerShellPrototype