Potato Vulnerabilities: Difference between revisions
m (Category add) |
(Added references) |
||
| Line 1: | Line 1: | ||
== Summary == | |||
This article explores the family of Potato Vulnerabilities | |||
== Overview of Potato Vulnerabilities == | |||
== Exploitation Techniques == | |||
== Specific Potato Vulnerabilities == | |||
== Mitigation == | |||
== References == | |||
* https://jlajara.gitlab.io/Potatoes_Windows_Privesc | |||
* https://foxglovesecurity.com/2016/01/16/hot-potato/ | |||
* https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/ | |||
* https://hideandsec.sh/books/windows-sNL/page/in-the-potato-family-i-want-them-all | |||
* https://decoder.cloud/2017/12/23/the-lonely-potato/ | |||
* http://ohpe.it/juicy-potato/ | |||
* https://shenaniganslabs.io/2019/11/12/Ghost-Potato.html | |||
* https://www.pentestpartners.com/security-blog/sweetpotato-service-to-system/ | |||
* https://decoder.cloud/2020/05/11/no-more-juicypotato-old-story-welcome-roguepotato/ | |||
* https://micahvandeusen.com/the-power-of-seimpersonation/ | |||
* https://www.sentinelone.com/labs/relaying-potatoes-another-unexpected-privilege-escalation-vulnerability-in-windows-rpc-protocol/ | |||
* https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/ | |||
* https://sensepost.com/blog/2022/certpotato-using-adcs-to-privesc-from-virtual-and-network-service-accounts-to-local-system/ | |||
* https://decoder.cloud/2023/02/13/localpotato-when-swapping-the-context-leads-you-to-system/ | |||
* https://blog.hackvens.fr/articles/CoercedPotato.html | |||
* https://purplesec.us/learn/privilege-escalation-attacks/ | |||
[[Category:Pentesting]] | [[Category:Pentesting]] | ||
Revision as of 17:11, 18 December 2024
Summary
This article explores the family of Potato Vulnerabilities
Overview of Potato Vulnerabilities
Exploitation Techniques
Specific Potato Vulnerabilities
Mitigation
References
- https://jlajara.gitlab.io/Potatoes_Windows_Privesc
- https://foxglovesecurity.com/2016/01/16/hot-potato/
- https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/
- https://hideandsec.sh/books/windows-sNL/page/in-the-potato-family-i-want-them-all
- https://decoder.cloud/2017/12/23/the-lonely-potato/
- http://ohpe.it/juicy-potato/
- https://shenaniganslabs.io/2019/11/12/Ghost-Potato.html
- https://www.pentestpartners.com/security-blog/sweetpotato-service-to-system/
- https://decoder.cloud/2020/05/11/no-more-juicypotato-old-story-welcome-roguepotato/
- https://micahvandeusen.com/the-power-of-seimpersonation/
- https://www.sentinelone.com/labs/relaying-potatoes-another-unexpected-privilege-escalation-vulnerability-in-windows-rpc-protocol/
- https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/
- https://sensepost.com/blog/2022/certpotato-using-adcs-to-privesc-from-virtual-and-network-service-accounts-to-local-system/
- https://decoder.cloud/2023/02/13/localpotato-when-swapping-the-context-leads-you-to-system/
- https://blog.hackvens.fr/articles/CoercedPotato.html
- https://purplesec.us/learn/privilege-escalation-attacks/