decoder-it

LocalPotato. C++

psgetsystem. getsystem via parent process using ps1 & embeded c#

KrbRelayEx. C#

ADCSCoercePotato. C++

KrbRelay-SMBServer. C#

printerbugnew. The DCERPC only printerbug.py version

KrbRelayEx-RPC. C#

TokenStealer. C++

powershellveryless. Constrained Language Mode + AMSI bypass all in one

ChgPass. C

NetworkServiceExploit. POC for NetworkService PrivEsc

juicy_2. juicypotato for win10 > 1803 & win server 2019

whoami-priv-Hackinparis2019. Slides from my talk in "Hackinparis" 2019 edition

psportfwd. a simple portforwarder in ps1 with embeded c# code

juicy-potato. A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

RelabelAbuse. C++

pipeserverimpersonate. named pipe server with impersonation

Hyper-V-admin-EOP. Small POC in powershell exploiting hardlinks during the VM deletion process

impacket-partial-mic. Impacket with --remove-mic-partial

Troopers24.

DFSCoerce-exe-2. DFSCoerce exe revisited version with custom authentication

NewMachineAccount. C#

whoami-priv. Slides from my talk "whoami /priv" at Romhack 2018

BadBackupOperator. C++

diaghub_exploit. Simplified version of Forshaw's Diaghub Collector Exploit

bluehatil22. Slides from out talk at BH IL 2022

CreateTokenExample. C++

TestComputerSpnDNS. Simple powershell script to tests for "GHOST" SPN's

lonelypotato. Switch to JuicyPotato! https://github.com/decoder-it/juicy-potato

hacktivity2019. Slides from my presentation at Budapest

JuicyPotatoNG. Another Windows Local Privilege Escalation from Service Account to System

RoguePotato. Another Windows Local Privilege Escalation from Service Account to System

redteam-research. Collection of PoC and offensive techniques used by the BlackArrow Red Team

whoami-priv-slides-budapest-2019.