SeImpersonatePrivilege

SeImpersonatePrivilege allows us to impersonate any token for which we can get a reference, or handle.

The following is based on printerbug / sharpspooltrigger but for local elevation.

PrintSpoofer automates this process / exploit

PrintSpoofer.exe -i -c cmd

You will need to bypass signature based AV

Tools

• https://github.com/itm4n/PrintSpoofer