The original Potato vulnerability for local privilege escalation actually worked for quite a while before it got fixed! It was mostly just the implementation of some of @tiraniddo's research that had been marked "WontFix" by MS.
It's a bit older but this book is worth a read on the subject amazon.ca/Structure-Scientif…
Steve Breen retweeted
Just uploaded the pdf slides of my talk "whoami /priv" @hackinparis #HIP19 github.com/decoder-it/whoami…
Steve Breen retweeted
This paper is *the* resource for abusing tokens on Windows for privilege escalation. I especially appreciate the level of detail @dronesec and @breenmachine go into to explain the token ecosystem, permissions, past attacks, etc. 10/10 would read again.
github.com/hatRiot/token-pri…
Nice!
A small gift from S2anta: @breenmachine showed how to abuse JasperReports for RCE (foxglovesecurity.com/2016/10…) - now here's a single .JRXML file to achieve the same thing if no .JAR's are allowed:
gist.github.com/v-p-b/dd95c7…
Steve Breen retweeted
Hey so we're stoked to welcome @jstnkndy @breenmachine and @brandonprry from @foxglovesec to the AtrediFam.
We've been calling it "The Hat Trick".
Steve Breen retweeted
I'm releasing with @Giutro Juicy Potato, another Local Privilege Escalation tool from a Windows Service Accounts to SYSTEM by abusing the golden privileges (decoder.cloud/2018/08/10/jui…)
Steve Breen retweeted
#UnpopularOpinion conferences should more heavily vet talks and reject those that are subpar because those speakers often get an inflated sense of skill and spread misinformation.
Steve Breen retweeted
Custom version of C++ Rotten Potato along with some observations ;-) decoder.cloud/2018/01/13/pot…
Steve Breen retweeted
@ifsecure uploaded the privilege escalation I wrote (with @halvarflake size coding) for the WPAD blog. bugs.chromium.org/p/project-… Small footprint and uses RPC libs instead of parsing the RPC traffic like Rotten Potato /cc @breenmachine
Steve Breen retweeted
#RottenPotatoNG - New version of #RottenPotato as a C++ DLL and standalone C++ binary by @breenmachine github.com/breenmachine/Rott…
I believe you maintain the printer hacking wiki? Great resource, was very useful during this project. If you have any questions or would like to add some of this material to the wiki, I'd be interested in assisting.
Steve Breen retweeted
HP has released the security bulletin which addresses the vulnerability described in our blogpost support.hp.com/nz-en/documen…
Steve Breen retweeted
We think HP should be more concerned with foxes than wolves - "A Sheep in Wolf's Clothing - Finding RCE in HP's Printer Fleet" by @breenmachine - foxglovesecurity.com/2017/11…
Steve Breen retweeted
Abusing delay load DLLs for remote process injection hatriot.github.io/blog/2017/…
Steve Breen retweeted
Dropping @breenmachine and @dronesec latest Windows privilege escalation project - For exploit devs and pentesters - foxglovesecurity.com/2017/08…
