zcgonvh/EfsPotato

Stars
709
Rank 63,472 (Top 2 %)
Language
C#
Created about 3 years ago
Updated 10 months ago

zcgonvh/EfsPotato

zcgonvh

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

Exploit for EfsPotato(MS-EFSR EfsRpcEncryptFileSrv with SeImpersonatePrivilege local privalege escalation vulnerability).

build

#for 4.x
csc.exe EfsPotato.cs -nowarn:1691,618
csc /platform:x86 EfsPotato.cs -nowarn:1691,618

#for 2.0/3.5
C:\Windows\Microsoft.Net\Framework\V3.5\csc.exe EfsPotato.cs -nowarn:1691,618
C:\Windows\Microsoft.Net\Framework\V3.5\csc.exe /platform:x86 EfsPotato.cs -nowarn:1691,618

usage

usage: EfsPotato <cmd> [pipe]
  pipe -> lsarpc|efsrpc|samr|lsass|netlogon (default=lsarpc)

DCOMPotato

Some Service DCOM Object and SeImpersonatePrivilege abuse.

CVE-2020-0688

Exploit and detect tools for CVE-2020-0688

TaskSchedulerMisc

Misc TaskScheduler Plays

NTDSDumpEx

NTDS.dit offline dumper with non-elevated

CVE-2020-17144

weaponized tool for CVE-2020-17144

cve-2017-7269

fixed msf module for cve-2017-7269

SSMSPwd

SQL Server Management Studio(SSMS) saved password dumper

cve-2017-7269-tool

CVE-2017-7269 to webshell or shellcode loader

MS16-032

MS16-032(CVE-2016-0099) for SERVICE ONLY

CVE-2017-0213

CVE-2017-0213 for command line

POPFuckProxy

POP3 MITM example

JavaTimeAgent

fix time for java application using javaAgent

LinkedServerPwdDumper

SqlServer Linked Password Dumper.