itsMe Posted April 13, 2023 Share Posted April 13, 2023 This is the hidden content, please Sign In or Sign Up Based on the history of Potato privilege escalation for 6 years, from the beginning of RottenPotato to the end of JuicyPotatoNG, I discovered a new technology by researching DCOM, which enables privilege escalation in Windows 2012 - Windows 2022, now as long as you have "ImpersonatePrivilege" permission. Then you are "NT AUTHORITY\SYSTEM", usually WEB services and database services have "ImpersonatePrivilege" permissions. Potato privilege escalation is usually used when we obtain WEB/database privileges. We can elevate a service user with low privileges to "NT AUTHORITY\SYSTEM" privileges. However, the historical Potato has no way to run on the latest Windows system. When I was researching DCOM, I found a new method that can perform privilege escalation. There are some defects in rpcss when dealing with oxid, and rpcss is a service that must be opened by the system. , so it can run on almost any Windows OS, I named it GodPotato Affected version Windows Server 2012 - Windows Server 2022 Windows8 - Windows 11 V1.20 update Unmarshal method Remote object clsid is not required now! This is the hidden content, please Sign In or Sign Up Link to comment Share on other sites More sharing options...
Recommended Posts