wiki created

documentation-payload/Cazalla/commands/rev2self.md

@@ -0,0 +1,41 @@
+# rev2self - Revert Token Impersonation
+
+Revert token impersonation back to the original process token.
+
+## Description
+
+The `rev2self` command reverts token impersonation back to the original process token. This command stops impersonating any stolen or created token and returns to the agent's original security context.
+
+## Syntax
+
+```
+rev2self
+```
+
+## Examples
+
+```
+rev2self
+```
+
+## Features
+
+- This command stops impersonating any stolen or created token and returns to the agent's original security context
+- The impersonation context in the Mythic UI is automatically cleared
+- Use this command after completing operations that required elevated privileges to return to a less-privileged context and reduce detection risk
+
+## Output
+
+```
+[rev2self] Reverted to original token
+[rev2self] Current user: DESKTOP-ABC\OriginalUser
+```
+
+## Related
+
+[Token Support](../../../features.md#token-support), [Context Tracking](../../../features.md#context-tracking)
+
+---
+
+**Command Category:** Token Operations  
+**Requires Admin:** No