repository·main·Indexed 19 days ago
https://github.com/s3cur3th1ssh1t/sharpimpersonationA tool for user impersonation and process injection. It enables listing user and elevated processes, executing binaries under a target user's token, and injecting shellcode via Base64 strings or remote URLs into target user processes.
Impersonate a target user for the current session using the ImpersonateLoggedOnuser technique. Specify the target user with the user: parameter and set the technique: parameter to ImpersonateLoggedOnuser.
SharpImpersonation.exe user:<user> technique:ImpersonateLoggedOnuserInject shellcode directly into the first process of a target user by providing the username and the shellcode as a Base64 encoded string using the user: and shellcode: parameters.
SharpImpersonation.exe user:<user> shellcode:<base64shellcode>You can impersonate the first process found belonging to a specific user and use that token to execute a new binary. Provide the target username via the user: parameter and the full path to the executable via the binary: parameter.
SharpImpersonation.exe user:<user> binary:<binary-Path>Inject shellcode into the first process of a target user by downloading it from a remote URL. Use the user: parameter for the target username and the shellcode: parameter to provide the URL of the shellcode payload.
SharpImpersonation.exe user:<user> shellcode:<URL>Use the list command to enumerate all currently running user processes on the system.
SharpImpersonation.exe listUse the list elevated command to filter the process list and show only processes running with elevated privileges.
SharpImpersonation.exe list elevated