Potatos

Juicy Potato

Juicy Potato can be downloaded from: https://github.com/ohpe/juicy-potato If you want the latest and greatest, you will need to compile it yourself although changes do not happen often.

Juicy Potato is a revision of Rotten Potato: https://www.youtube.com/watch?v=8Wjs__mWOKI This forces NT SYSTEM to authenticate to a listener on the local system which it then uses that authentication and passes it to its own AcquireCredentialsHandle which allows it to then impersonate NT SYSTEM.

Juicy Potato extends the capabilities of Rotten Potato which was limited to only allowing the listener to be on the local system and only uses port 6666.

Rogue Potato

Juicy Potato will not work on Server 2019 or Windows 10; however, there is a new potato in town, Rogue Potato. https://github.com/antonioCoco/RoguePotato

For more detailed information about it check out: https://decoder.cloud/2020/05/11/no-more-juicypotato-old-story-welcome-roguepotato/