JuicyPotatoNG

JuicyPotatoNG 又一个从服务账户到系统的 Windows 本地权限提升工具。完整详情见 -- https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/ 用法 root@kitploit: JuicyPotatoNG by decoderit & splintercode Mandatory args: -t createprocess call: CreateProcessWithTokenW, CreateProcessAsUser, try both -p :...

New CherryLoader Malware Mimics CherryTree to Deploy PrivEsc Exploits

A new Go-based malware loader called CherryLoader has been discovered by threat hunters in the wild to deliver additional payloads onto compromised hosts for follow-on exploitation. Arctic Wolf Labs, which discovered the new attack tool in two recent intrusions, said the loader's icon and name...