0xbadjuju/Tokenvator

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1067 stars · 202 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Tokenvator is a C# command-line tool for manipulating Windows tokens to elevate privileges, such as stealing a SYSTEM token from a running process. It is an offensive security utility commonly used in penetration testing and red team operations.

Use cases

• escalate privileges to SYSTEM on a Windows host
• steal a token from another process to run commands as that user
• enumerate and manipulate Windows token privileges during a pentest
• add a local user using elevated token privileges
• post-exploitation privilege escalation on Windows

When to choose

• you are performing authorized Windows penetration testing or red team engagements
• you need a lightweight CLI tool for token manipulation and privilege escalation
• you want to run commands in the context of another process's token

When to avoid

• you need defensive security or token auditing rather than offensive tooling
• you are on a non-Windows platform
• you need a maintained tool with an active development roadmap

Facets

cli-tool · maturity maintenance

security penetration-testing security penetration-testing windows windows cli privilege-escalation windows-tokens red-team offensive-security csharp

Member repositories

For agents

markdown · JSON · MCP: product_card(name="0xbadjuju/Tokenvator")