antonioCoco / JuicyPotatoNG Public

Notifications You must be signed in to change notification settings
Fork 99
Star 812

Another Windows Local Privilege Escalation from Service Account to System

812 stars 99 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 8 Commits
.gitignore		.gitignore
IStorageTrigger.cpp		IStorageTrigger.cpp
IStorageTrigger.h		IStorageTrigger.h
IUnknownObj.cpp		IUnknownObj.cpp
IUnknownObj.h		IUnknownObj.h
JuicyPotatoNG.cpp		JuicyPotatoNG.cpp
JuicyPotatoNG.sln		JuicyPotatoNG.sln
JuicyPotatoNG.vcxproj		JuicyPotatoNG.vcxproj
JuicyPotatoNG.vcxproj.filters		JuicyPotatoNG.vcxproj.filters
LICENSE		LICENSE
PotatoTrigger.cpp		PotatoTrigger.cpp
PotatoTrigger.h		PotatoTrigger.h
README.md		README.md
SSPIHooks.cpp		SSPIHooks.cpp
SSPIHooks.h		SSPIHooks.h
demo.png		demo.png
test_system_ports.ps1		test_system_ports.ps1

Repository files navigation

JuicyPotatoNG

Just another Windows Local Privilege Escalation from Service Account to System. Full details at --> https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/

Usage


         JuicyPotatoNG
         by decoder_it & splinter_code


Mandatory args:
-t createprocess call: <t> CreateProcessWithTokenW, <u> CreateProcessAsUser, <*> try both
-p <program>: program to launch


Optional args:
-l <port>: COM server listen port (Default 10247)
-a <argument>: command line argument to pass to program (default NULL)
-c <CLSID> (Default {854A20FB-2D44-457D-992F-EF13785D2B51})