A primer to the token stealing technique

This document presents a technique used by attackers to escalate privileges in Microsoft Windows systems. The technique itself is used in the wild by some exploits and frameworks. However it is barely documented and in order to understand it, it is necessary to reverse the shellcodes used in the wild. In this brief article the technique, the code and an explanation of how it works are presented.