FaceDancer

Playing around with token manipulation in C#. This will try to steal a token from the target PID (defaults to winlogon.exe), and start the specified executable (defaults to cmd.exe).

Usage

FaceDancer.exe [PID] [C:\Path\To\Executable.exe]