marcos.luna
42 lines
1.0 KiB
Markdown
42 lines
1.0 KiB
Markdown
# rev2self - Revert Token Impersonation
|
|
|
|
Revert token impersonation back to the original process token.
|
|
|
|
## Description
|
|
|
|
The `rev2self` command reverts token impersonation back to the original process token. This command stops impersonating any stolen or created token and returns to the agent's original security context.
|
|
|
|
## Syntax
|
|
|
|
```
|
|
rev2self
|
|
```
|
|
|
|
## Examples
|
|
|
|
```
|
|
rev2self
|
|
```
|
|
|
|
## Features
|
|
|
|
- This command stops impersonating any stolen or created token and returns to the agent's original security context
|
|
- The impersonation context in the Mythic UI is automatically cleared
|
|
- Use this command after completing operations that required elevated privileges to return to a less-privileged context and reduce detection risk
|
|
|
|
## Output
|
|
|
|
```
|
|
[rev2self] Reverted to original token
|
|
[rev2self] Current user: DESKTOP-ABC\OriginalUser
|
|
```
|
|
|
|
## Related
|
|
|
|
[Token Support](../../../features.md#token-support), [Context Tracking](../../../features.md#context-tracking)
|
|
|
|
---
|
|
|
|
**Command Category:** Token Operations
|
|
**Requires Admin:** No
|