master
Fixing a little error.
Fixing inconsistency in flags for spnego token processes.
Replacing all manual zero initializations by one ZeroMemory at start of constructor.
Formatting code by removing whitespaces.
Adding new options to module. Now it is possible to choose which process to launch as SYSTEM, as well as the port the exploit will listen (because on some Windows configuration, WinRM should listen on port 47001).
Fixing typos in comments.
Replacing old base64 encoding and decoding "homemade" function by wincrypt.h functions (CryptBinaryToStringA and CryptStringToBinaryA). Adding some little adjustments in calling functions of elevator server.
Removing powershell payload serving method, and replacing it by just writing and executing in remote SYSTEM process.