Invoke-SeRestoreAbuse

Invoke-SeRestoreAbuse is a privilege escalation tool that exploits the SeRestorePrivilege via Seclogon service hijacking to execute arbitrary commands with SYSTEM privileges. It achieves this by modifying the Seclogon service's ImagePath using SeRestorePrivilege and REG_OPTION_BACKUP_RESTORE techniques. This tool is designed for authorized system penetration testing and is accompanied by usage demonstrations.