potatoes

These can be real handy for local privesc. Some resources:

SweetPotato

• Where to get it: https://github.com/CCob/SweetPotato
• How it works: https://hideandsec.sh/books/windows-sNL/page/in-the-potato-family-i-want-them-all#bkmrk-how-it-works-5
• Using it to escalate privs:https://www.pentestpartners.com/security-blog/sweetpotato-service-to-system/
• Sample command line syntax:

Cmd > .\SweetPotato.exe -p C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -a "-w hidden -enc <BASE64_CMD>"