rapid7/metasploit-framework — pull request #656 by jlee-r7 (2012-08-01 07:16:51+00:00)
Title: Current user psexec

I demo'd this module at DefCon. Essentially, it uses the session's current token to attempt to create a service on remote machines, using a UNC path pointing to the session host as the executable to avoid having to upload directly to each target.