antonioCoco / JuicyPotatoNG Public

Notifications You must be signed in to change notification settings
Fork 100
Star 815

Another Windows Local Privilege Escalation from Service Account to System

815 stars 100 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 9 Commits
.gitignore		.gitignore
IStorageTrigger.cpp		IStorageTrigger.cpp
IStorageTrigger.h		IStorageTrigger.h
IUnknownObj.cpp		IUnknownObj.cpp
IUnknownObj.h		IUnknownObj.h
JuicyPotatoNG.cpp		JuicyPotatoNG.cpp
JuicyPotatoNG.sln		JuicyPotatoNG.sln
JuicyPotatoNG.vcxproj		JuicyPotatoNG.vcxproj
JuicyPotatoNG.vcxproj.filters		JuicyPotatoNG.vcxproj.filters
LICENSE		LICENSE
PotatoTrigger.cpp		PotatoTrigger.cpp
PotatoTrigger.h		PotatoTrigger.h
README.md		README.md
SSPIHooks.cpp		SSPIHooks.cpp
SSPIHooks.h		SSPIHooks.h
demo.png		demo.png
test_system_ports.ps1		test_system_ports.ps1

Repository files navigation

JuicyPotatoNG

Just another Windows Local Privilege Escalation from Service Account to System. Full details at --> https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/

Usage


         JuicyPotatoNG
         by decoder_it & splinter_code


Mandatory args:
-t createprocess call: <t> CreateProcessWithTokenW, <u> CreateProcessAsUser, <*> try both
-p <program>: program to launch


Optional args:
-l <port>: COM server listen port (Default 10247)
-a <argument>: command line argument to pass to program (default NULL)
-c <CLSID>: (Default {854A20FB-2D44-457D-992F-EF13785D2B51})
-i : Interactive Console (valid only with CreateProcessAsUser)