Category Rds-Impersonation

blog
1+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

Rds-Impersonation blog

Filters

  • SeDelegateSessionUserImpersonatePrivilege: Cross-Session Token Stealing on RDS and Citrix
    web hacking

    SeDelegateSessionUserImpersonatePrivilege: Cross-Session Token Stealing on RDS and Citrix

    How to exploit SeDelegateSessionUserImpersonatePrivilege to impersonate users in active RDS sessions. Cross-session token stealing with NtObjectManager. Privesc and Red Team techniques.

    Discover more Discover more