marcos.luna
1.0 KiB
1.0 KiB
rev2self - Revert Token Impersonation
Revert token impersonation back to the original process token.
Description
The rev2self command reverts token impersonation back to the original process token. This command stops impersonating any stolen or created token and returns to the agent's original security context.
Syntax
rev2self
Examples
rev2self
Features
- This command stops impersonating any stolen or created token and returns to the agent's original security context
- The impersonation context in the Mythic UI is automatically cleared
- Use this command after completing operations that required elevated privileges to return to a less-privileged context and reduce detection risk
Output
[rev2self] Reverted to original token
[rev2self] Current user: DESKTOP-ABC\OriginalUser
Related
Token Support, Context Tracking
Command Category: Token Operations
Requires Admin: No