Tokenvator: A Tool to Elevate Privilege using Windows Tokens

NetSPI releases Tokenvator 2, a .NET token manipulation tool adding token display, privilege disabling and removal, named pipe tokens, and minifilter manipulation for Windows privilege escalation.

NetSPI releases Tokenvator 3, a major overhaul of its Windows token manipulation tool with auto-completing flag commands, improved info output, and new impersonation (thread) token support.

Traces the evolution of offensive PowerShell invocation from powershell.exe command lines to in-memory .NET loading with UnmanagedPowerShell, evading process creation monitoring.

A Project Zero post explains how arbitrary file write bugs on Windows can be turned into local privilege escalation, walking through practical exploitation techniques for this bug class.

A Project Zero post in the Windows exploitation tricks series, showing how an arbitrary directory creation primitive can be escalated into arbitrary file read.

A Project Zero post on exploiting .NET Managed DCOM, a case where bugs in interoperability technology affect every application using it regardless of function.