decoder-it / psgetsystem

getsystem via parent process using ps1 & embeded c#

psgetsystem

Impersonate user via parent process spoofing using ps1 and embeded c#
https://decoder.cloud/2018/02/02/getting-system/

PS> . .\psgetsys.ps1 

PS> ImpersonateFromParentPid -ppid <parentpid> -command <command to execute> -cmdargs <command arguments>