Another blog post! 
PrintSpoofer - Abusing SeImpersonate on Windows 10 and Server 2019
https://itm4n.github.io/printspoofer-abusing-impersonate-privileges/ …
cc @jonasLykpic.twitter.com/VVIzLw06xA
A bit of info not mentioned- impersonation requires that you read like 4 bytes or something from the pipe before it is allowed. That can stop many other vulnerable scenarios. That is why we use UNC path- by having the service open \\computername that requirement is bypassed :)
