How can you use Incognito in Metasploit to steal tokens and escalate privileges?
In Metasploit, load the incognito module with `load incognito`, then list available tokens with `list_tokens -u`. You can impersonate a token using `impersonate_token "NT AUTHORITY\\SYSTEM"` or steal a token from a specific process with `steal_token <PID>`. Use `getsystem` to elevate to SYSTEM, and `rev2self` to revert. This is a common post-exploitation technique for privilege escalation, similar to other techniques covered in Penetration Techniques - Exploitation of Nine Windows Privileges.
IncognitoMetasploittoken theftprivilege escalation