LocalPotato (Windows LPE) обновлён и теперь поддерживает HTTP/WebDAV.

Git: https://github.com/decoder-it/LocalPotato

Blog: https://decoder.cloud/2023/11/03/localpotato-http-edition/

The HTTP/WebDAV scenario is currently unpatched (Microsoft decision, we reported it) and works on updated systems.

#git #lpe #redteam #redteam

CVE-2023-36003 (Windows LPE XAML diagnostics API)

Blog: https://m417z.com/Privilege-escalation-using-the-XAML-diagnostics-API-CVE-2023-36003/

PoC: https://github.com/m417z/CVE-2023-36003-POC

Исправлено в патче от 12 декабря

#lpe #ad #pentest #redteam