{"id":16655214,"url":"https://github.com/franckferman/systematic","last_synced_at":"2026-04-02T12:59:24.602Z","repository":{"id":209302264,"uuid":"717518315","full_name":"franckferman/SYSTEMatic","owner":"franckferman","description":"👻 SYSTEMatic: Systematically Seizing SYSTEM Rights. Token Impersonation POC. Alternative to PSExec for token theft. From Administrator to NT Authority\\SYSTEM.","archived":false,"fork":false,"pushed_at":"2023-12-01T01:09:20.000Z","size":134,"stargazers_count":3,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-01-19T11:31:57.240Z","etag":null,"topics":["administration-system","administrator","c","cyber-security","cybersecurity","elevation-of-privilege","exploiting","poc","privilege-elevation","privilege-escalation","proof-of-concept","proof-of-work","psexec","security","security-tools","system-administration","token-stealer","windows","windows-10","windows-server"],"latest_commit_sha":null,"homepage":"https://github.com/franckferman/SYSTEMatic","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/franckferman.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2023-11-11T17:53:31.000Z","updated_at":"2024-08-15T00:53:57.000Z","dependencies_parsed_at":"2023-12-01T02:26:20.849Z","dependency_job_id":"77ac66f8-0775-4d50-a39b-7bf9efa016ca","html_url":"https://github.com/franckferman/SYSTEMatic","commit_stats":null,"previous_names":["franckferman/systematic"],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/franckferman%2FSYSTEMatic","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/franckferman%2FSYSTEMatic/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/franckferman%2FSYSTEMatic/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/franckferman%2FSYSTEMatic/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/franckferman","download_url":"https://codeload.github.com/franckferman/SYSTEMatic/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243275598,"owners_count":20265208,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["administration-system","administrator","c","cyber-security","cybersecurity","elevation-of-privilege","exploiting","poc","privilege-elevation","privilege-escalation","proof-of-concept","proof-of-work","psexec","security","security-tools","system-administration","token-stealer","windows","windows-10","windows-server"],"created_at":"2024-10-12T09:52:15.696Z","updated_at":"2025-12-27T17:16:21.378Z","avatar_url":"https://github.com/franckferman.png","language":"C","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cdiv id=\"top\" align=\"center\"\u003e\n\n\u003c!-- Shields Header --\u003e\n[![Contributors][contributors-shield]](https://github.com/franckferman/SYSTEMatic/graphs/contributors)\n[![Forks][forks-shield]](https://github.com/franckferman/SYSTEMatic/network/members)\n[![Stargazers][stars-shield]](https://github.com/franckferman/SYSTEMatic/stargazers)\n[![Issues][issues-shield]](https://github.com/franckferman/SYSTEMatic/issues)\n[![License][license-shield]](https://github.com/franckferman/SYSTEMatic/blob/stable/LICENSE)\n\n\u003c!-- Logo --\u003e\n\u003ca href=\"https://github.com/franckferman/SYSTEMatic\"\u003e\n  \u003cimg src=\"https://raw.githubusercontent.com/franckferman/SYSTEMatic/main/docs/github/graphical_resources/Logo-Without_background-SYSTEMatic.png\" alt=\"SYSTEMatic Logo\" width=\"auto\" height=\"auto\"\u003e\n\u003c/a\u003e\n\n\u003c!-- Title \u0026 Tagline --\u003e\n\u003ch3 align=\"center\"\u003e👻 SYSTEMatic\u003c/h3\u003e\n\u003cp align=\"center\"\u003e\n    \u003cem\u003eSYSTEMatic: Systematically Seizing SYSTEM Rights.\u003c/em\u003e\n    \u003cbr\u003e\n    Token Impersonation POC. Alternative to PSExec for token theft.\n    \u003cbr\u003e\n    \u003cem\u003eFrom Administrator to NT Authority\\SYSTEM.\u003c/em\u003e\n\u003c/p\u003e\n\n\u003c!-- Links \u0026 Demo --\u003e\n\u003cp align=\"center\"\u003e\n    \u003ca href=\"https://github.com/franckferman/SYSTEMatic/blob/stable/README.md\" class=\"button-style\"\u003e\u003cstrong\u003e📘 Explore the full documentation\u003c/strong\u003e\u003c/a\u003e\n    ·\n    \u003ca href=\"https://github.com/franckferman/SYSTEMatic/issues\"\u003e🐞 Report Bug\u003c/a\u003e\n    ·\n    \u003ca href=\"https://github.com/franckferman/SYSTEMatic/issues\"\u003e🛠️ Request Feature\u003c/a\u003e\n\u003c/p\u003e\n\n\u003c/div\u003e\n\n## 📜 Table of Contents\n\n\u003cdetails open\u003e\n  \u003csummary\u003e\u003cstrong\u003eClick to collapse/expand\u003c/strong\u003e\u003c/summary\u003e\n  \u003col\u003e\n    \u003cli\u003e\u003ca href=\"#-about\"\u003e📖 About\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#-troubleshooting\"\u003e❗ Troubleshooting\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#-contributing\"\u003e🤝 Contributing\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#%EF%B8%8F-legal-disclaimer\"\u003e⚖️ Legal Disclaimer\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#-star-evolution\"\u003e🌠 Star Evolution\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#-license\"\u003e📜 License\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#-contact\"\u003e📞 Contact\u003c/a\u003e\u003c/li\u003e\n  \u003c/ol\u003e\n\u003c/details\u003e\n\n## 📖 About\n\nSYSTEMatic is a streamlined and effective Proof of Concept (POC) tool specifically designed for achieving SYSTEM-level access through token impersonation in Windows environments. This tool stands out for its focused and simplified approach, presenting a specialized alternative to utilities like PSExec. SYSTEMatic excels in scenarios requiring privilege escalation, seamlessly transitioning from administrator-level to SYSTEM-level privileges.\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://github.com/franckferman/SYSTEMatic/blob/main/docs/github/graphical_resources/Screenshot-SYSTEMatic_Demo.png\" alt=\"SYSTEMatic Demo Screenshot\" width=\"auto\" height=\"auto\"\u003e\n\u003c/p\u003e\n\n### ⚙️ Technical Overview:\n\nToken Impersonation: SYSTEMatic performs token impersonation by extracting and duplicating a SYSTEM token from an active process using Windows API functions like OpenProcess, OpenProcessToken, and DuplicateTokenEx. This allows it to operate with SYSTEM-level privileges.\n\nLightweight and Direct: Designed for efficiency and straightforward use, the program is lightweight and directly interacts with system processes and tokens, minimizing complexity and resource usage.\n\nTargeted Functionality: Specifically focuses on elevating privileges to the SYSTEM level by duplicating and using SYSTEM tokens, a targeted approach for precise security operations.\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#top\"\u003e🔼 Back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 🔧 Troubleshooting\n\nEncountering issues? Don't worry. If you come across any problems or have questions, please don't hesitate to submit a ticket for assistance: [Submit an issue on GitHub](https://github.com/franckferman/SYSTEMatic/issues)\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#top\"\u003e🔼 Back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 🤝 Contributing\n\nWe truly appreciate and welcome community involvement. Your contributions, feedback, and suggestions play a crucial role in improving the project for everyone. If you're interested in contributing or have ideas for enhancements, please feel free to open an issue or submit a pull request on our GitHub repository. Every contribution, no matter how big or small, is highly valued and greatly appreciated!\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#top\"\u003e🔼 Back to top\u003c/a\u003e)\u003c/p\u003e\n\n## ⚖️ Legal Disclaimer\n\nPlease be aware that the use of the `SYSTEMatic` tool may be subject to specific laws and regulations in your country or region. Before using this tool, it is your responsibility to ensure that its use is in compliance with the laws applicable in your jurisdiction.\n\nThe creator of `SYSTEMatic` cannot be held responsible for any improper or illegal use of this tool. By using `SYSTEMatic`, you acknowledge and agree that you are solely responsible for complying with local laws and regulations.\n\nIn some instances, the use of `SYSTEMatic` might be justified for legitimate purposes such as protection against authoritarian regimes or for survival matters. However, it is strongly advised to take all necessary measures to protect yourself and to abide by the law.\n\nBy using `SYSTEMatic`, you acknowledge having read this disclaimer and agree to act accordingly. The creator of `SYSTEMatic` does not in any way endorse the use of this tool for illegal or harmful purposes.\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#top\"\u003e🔼 Back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 🌠 Star Evolution\n\nExplore the star history of this project and see how it has evolved over time:\n\n\u003ca href=\"https://star-history.com/#franckferman/SYSTEMatic\u0026Timeline\"\u003e\n  \u003cpicture\u003e\n    \u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://api.star-history.com/svg?repos=franckferman/SYSTEMatic\u0026type=Timeline\u0026theme=dark\" /\u003e\n    \u003cimg alt=\"Star History Chart\" src=\"https://api.star-history.com/svg?repos=franckferman/SYSTEMatic\u0026type=Timeline\" /\u003e\n  \u003c/picture\u003e\n\u003c/a\u003e\n\nYour support is greatly appreciated. We're grateful for every star! Your backing fuels our passion. ✨\n\n## 📚 License\n\nThis project is licensed under the GNU Affero General Public License, Version 3.0. For more details, please refer to the LICENSE file in the repository: [Read the license on GitHub](https://github.com/franckferman/SYSTEMatic/blob/stable/LICENSE)\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#top\"\u003e🔼 Back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 📞 Contact\n\n[![ProtonMail][protonmail-shield]](mailto:contact@franckferman.fr) \n[![LinkedIn][linkedin-shield]](https://www.linkedin.com/in/franckferman)\n[![Twitter][twitter-shield]](https://www.twitter.com/franckferman)\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#top\"\u003e🔼 Back to top\u003c/a\u003e)\u003c/p\u003e\n\n\u003c!-- MARKDOWN LINKS \u0026 IMAGES --\u003e\n\u003c!-- https://www.markdownguide.org/basic-syntax/#reference-style-links --\u003e\n[contributors-shield]: https://img.shields.io/github/contributors/franckferman/SYSTEMatic.svg?style=for-the-badge\n[contributors-url]: https://github.com/franckferman/SYSTEMatic/graphs/contributors\n[forks-shield]: https://img.shields.io/github/forks/franckferman/SYSTEMatic.svg?style=for-the-badge\n[forks-url]: https://github.com/franckferman/SYSTEMatic/network/members\n[stars-shield]: https://img.shields.io/github/stars/franckferman/SYSTEMatic.svg?style=for-the-badge\n[stars-url]: https://github.com/franckferman/SYSTEMatic/stargazers\n[issues-shield]: https://img.shields.io/github/issues/franckferman/SYSTEMatic.svg?style=for-the-badge\n[issues-url]: https://github.com/franckferman/SYSTEMatic/issues\n[license-shield]: https://img.shields.io/github/license/franckferman/SYSTEMatic.svg?style=for-the-badge\n[license-url]: https://github.com/franckferman/SYSTEMatic/blob/stable/LICENSE\n[protonmail-shield]: https://img.shields.io/badge/ProtonMail-8B89CC?style=for-the-badge\u0026logo=protonmail\u0026logoColor=blueviolet\n[linkedin-shield]: https://img.shields.io/badge/-LinkedIn-black.svg?style=for-the-badge\u0026logo=linkedin\u0026colorB=blue\n[twitter-shield]: https://img.shields.io/badge/-Twitter-black.svg?style=for-the-badge\u0026logo=twitter\u0026colorB=blue\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffranckferman%2Fsystematic","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffranckferman%2Fsystematic","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffranckferman%2Fsystematic/lists"}