Skip to content

Instantly share code, notes, and snippets.

@hacksysteam

hacksysteam/token_stealing_2.raw

Created May 7, 2015 08:16
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save hacksysteam/dbcc64ce865b2faf43fd to your computer and use it in GitHub Desktop.
Save hacksysteam/dbcc64ce865b2faf43fd to your computer and use it in GitHub Desktop.
Download ZIP
Token Stealing Using WinDBG
Raw
token_stealing_2.raw
kd> !process 8570b5e8 1
PROCESS 8570b5e8 SessionId: 1 Cid: 025c Peb: 7ffdf000 ParentCid: 0704
DirBase: 3eea5340 ObjectTable: 953b8570 HandleCount: 21.
Image: cmd.exe
VadRoot 8553ba60 Vads 37 Clone 0 Private 135. Modified 0. Locked 0.
DeviceMap 92b1bc80
Token 953b6030
ElapsedTime 00:02:53.332
UserTime 00:00:00.000
. . .
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment