hub / github.com/antonioCoco/JuicyPotatoNG
github.com/antonioCoco/JuicyPotatoNG @v1.1
Chat with this repo
48 symbols
68 edges
11 files
3 documented · 6%
● updated 3y agov1.1 · 2022-10-05★ 9613 open issues
Browse by type
What it actually does AI analysis from the code graph — generated when you open this
loading…
README
JuicyPotatoNG
Just another Windows Local Privilege Escalation from Service Account to System. Full details at --> https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/
Usage
JuicyPotatoNG
by decoder_it & splinter_code
Mandatory args:
-t createprocess call: <t> CreateProcessWithTokenW, <u> CreateProcessAsUser, <*> try both
-p <program>: program to launch
Optional args:
-l <port>: COM server listen port (Default 10247)
-a <argument>: command line argument to pass to program (default NULL)
-c <CLSID>: (Default {854A20FB-2D44-457D-992F-EF13785D2B51})
-i : Interactive Console (valid only with CreateProcessAsUser)
Additional modes:
-b : Bruteforce all CLSIDs. !ALERT: USE ONLY FOR TESTING. About 1000 processes will be spawned!
-s : Seek for a suitable COM port not filtered by the Windows firewall
Demo
Authors
Core symbols most depended-on inside this repo
Release
called by 8
IUnknownObj.cpp
EnablePriv
called by 5
JuicyPotatoNG.cpp
usage
called by 3
JuicyPotatoNG.cpp
ImpersonateInteractiveSid
called by 1
JuicyPotatoNG.cpp
Juicy
called by 1
JuicyPotatoNG.cpp
SeekNonFilteredPorts
called by 1
JuicyPotatoNG.cpp
InitComServer
called by 1
PotatoTrigger.cpp
PotatoTrigger
called by 1
PotatoTrigger.cpp
Shape
Languages
C++100%
Modules by API surface
IStorageTrigger.cpp25 symbols
JuicyPotatoNG.cpp6 symbols
PotatoTrigger.cpp4 symbols
IUnknownObj.cpp4 symbols
BruteforceCLSIDs.cpp4 symbols
SSPIHooks.cpp3 symbols
IUnknownObj.h1 symbols
IStorageTrigger.h1 symbols
For agents
$ claude mcp add JuicyPotatoNG \
-- python -m otcore.mcp_server <graph>