juicy-potato

Juicy Potato Missbrauch der goldenen Privilegien Eine gezuckerte Version vonRottenPotatoNG, mit etwas Saft, d.h. ein weiteres Tool zur lokalen Privilegienausweitung, von Windows-Dienstkonten zu NT AUTHORITY\SYSTEM Zusammenfassung RottenPotatoNG und seine Varianten nutzen die...

Juicy-Potato-x86

Juicy-Potato-x86 Juicy Potato para Windows x86 Esta é uma versão do exploit de escalonamento de privilégios Juicy Potato de ohpe modificado para Windows x86. Preservei o máximo do código que pude, fazendo pequenas alterações necessárias para compilar para Windows x86. Testado com sucesso no Windo...

Flax Typhoon using legitimate software to quietly access Taiwanese organizations

Summary Microsoft has identified a nation-state activity group tracked as Flax Typhoon, based in China, that is targeting dozens of organizations in Taiwan with the likely intention of performing espionage. Flax Typhoon gains and maintains long-term access to Taiwanese organizations networks with...

Microsoft Windows Net-NTLMv2 Reflection DCOM/RPC Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/windows/reflectivedllinjection' class MetasploitModule 'Windows Net-NTLMv2 Reflection DCOM/RPC Juicy', 'Description' = %q This module utilizes the...

Windows Net-NTLMv2 Reflection DCOM/RPC (Juicy)

This module utilizes the Net-NTLMv2 reflection between DCOM/RPC to achieve a SYSTEM handle for elevation of privilege. It requires a CLSID string. Windows 10 after version 1803, April 2018 update, build 17134 and all versions of Windows Server 2019 are not vulnerable. Module Options msf use...