https://github.com/zcgonvh/EfsPotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).
https://github.com/zcgonvh/EfsPotato

Last synced: about 1 month ago
JSON representation

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

• Host: GitHub
• URL: https://github.com/zcgonvh/EfsPotato
• Owner: zcgonvh
• Created: 2021-07-26T21:36:16.000Z (about 3 years ago)
• Default Branch: master
• Last Pushed: 2023-12-14T14:30:15.000Z (9 months ago)
• Last Synced: 2024-05-07T00:35:55.736Z (4 months ago)
• Language: C#
• Size: 89.8 KB
• Stars: 674
• Watchers: 10
• Forks: 119
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - zcgonvh/EfsPotato - Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability). (C# #)

README

        
## Exploit for EfsPotato(MS-EFSR EfsRpcEncryptFileSrv with SeImpersonatePrivilege local privalege escalation vulnerability).

### build

	#for 4.x

	csc.exe EfsPotato.cs -nowarn:1691,618

	csc /platform:x86 EfsPotato.cs -nowarn:1691,618

	

	#for 2.0/3.5

	C:\Windows\Microsoft.Net\Framework\V3.5\csc.exe EfsPotato.cs -nowarn:1691,618

	C:\Windows\Microsoft.Net\Framework\V3.5\csc.exe /platform:x86 EfsPotato.cs -nowarn:1691,618

### usage

	usage: EfsPotato  [pipe]

  	  pipe -> lsarpc|efsrpc|samr|lsass|netlogon (default=lsarpc)

![](https://raw.githubusercontent.com/zcgonvh/EfsPotato/master/test.png)