# PrivEsc

Published articles for PrivEsc.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## SweetPotato - Local Service to SYSTEM

DevFeed: [SweetPotato - Local Service to SYSTEM](<https://devfeed.tech/articles/sweetpotato-local-service-to-system-32628.md>)

Original publisher: [Read original article](<https://ethicalchaos.dev/2020/04/13/sweetpotato-local-service-to-system-privesc/>)

Author: CCob

Published: 2020-04-13T17:30:53Z

Content type: article

Language: en

Sources: [Ethical Chaos](<https://devfeed.tech/sources/ethical-chaos.md>)

Topics: [Exploit](<https://devfeed.tech/topics/exploit.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [.NET](<https://devfeed.tech/topics/net.md>), [Security](<https://devfeed.tech/topics/security.md>), [C2](<https://devfeed.tech/topics/c2.md>)

Tags: [c-sharp](<https://devfeed.tech/tags/c-sharp.md>), [c2](<https://devfeed.tech/tags/c2.md>), [cobalt-strike](<https://devfeed.tech/tags/cobalt-strike.md>), [dcom](<https://devfeed.tech/tags/dcom.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [juicypotato](<https://devfeed.tech/tags/juicypotato.md>), [privesc](<https://devfeed.tech/tags/privesc.md>), [rottenpotato](<https://devfeed.tech/tags/rottenpotato.md>), [sweetpotato](<https://devfeed.tech/tags/sweetpotato.md>), [weaponize](<https://devfeed.tech/tags/weaponize.md>), [windows](<https://devfeed.tech/tags/windows.md>), [winrm](<https://devfeed.tech/tags/winrm.md>)

### AI overview

This article introduces SweetPotato, a C# rewrite of JuicyPotato that performs local service-account to SYSTEM privilege escalation on Windows. It adds a BITS/WinRM-based technique and can automatically select between exploit methods depending on the Windows version.

### Source excerpt

Upgraded JuicyPotato performing Local Service to SYSTEM privilege escalation on Windows 7 to the latest Windows 10 / Server 2019. The post SweetPotato - Local Service to SYSTEM appeared first on Ethical Chaos.

## Lenovo CVE-2020-8319 and CVE-2020-8324 PoC

DevFeed: [Lenovo CVE-2020-8319 and CVE-2020-8324 PoC](<https://devfeed.tech/articles/lenovo-cve-2020-8319-and-cve-2020-8324-poc-32627.md>)

Original publisher: [Read original article](<https://ethicalchaos.dev/2020/03/26/lenovo-cve-2020-8319-and-cve-2020-8324-poc/>)

Author: CCob

Published: 2020-03-26T17:35:16Z

Content type: article

Language: en

Sources: [Ethical Chaos](<https://devfeed.tech/sources/ethical-chaos.md>)

Topics: [lenovo](<https://devfeed.tech/topics/lenovo.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [coding](<https://devfeed.tech/topics/coding.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [c-sharp](<https://devfeed.tech/tags/c-sharp.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-2020-8319](<https://devfeed.tech/tags/cve-2020-8319.md>), [cve-2020-8324](<https://devfeed.tech/tags/cve-2020-8324.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [github](<https://devfeed.tech/tags/github.md>), [lenovo](<https://devfeed.tech/tags/lenovo.md>), [net](<https://devfeed.tech/tags/net.md>), [poc](<https://devfeed.tech/tags/poc.md>), [privesc](<https://devfeed.tech/tags/privesc.md>)

### AI overview

The article releases a C# proof of concept for Lenovo CVE-2020-8319 and CVE-2020-8324. It states that the vulnerabilities can enable privilege escalation from an unprivileged account to SYSTEM and recommends upgrading Lenovo Vantage's System Interface Foundation component to version 1.1.19.3 or higher.

### Source excerpt

C# PoC for Lenovo CVE-2020-8319 and CVE-2020-8324 The post Lenovo CVE-2020-8319 and CVE-2020-8324 PoC appeared first on Ethical Chaos.