ohpe/juicy-potato

Health v2 · maintenance only

Adoption not part of the score

2820 stars · 488 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Juicy Potato is a C++ Windows local privilege escalation tool that abuses COM/DCOM activation and impersonation privileges (SeImpersonate/SeAssignPrimaryToken) to elevate from Windows service accounts to NT AUTHORITY\SYSTEM. It is a configurable successor to RottenPotatoNG allowing custom CLSIDs, COM listening ports, and process launch options.

Use cases

• escalate from a Windows service account to SYSTEM during a pentest
• abuse SeImpersonate privileges to get a SYSTEM shell
• test exploitable CLSIDs across Windows versions
• bypass environments where BITS is disabled or port 6666 is taken
• launch an arbitrary process as SYSTEM via token impersonation

When to choose

• you are doing authorized penetration testing or red teaming on Windows
• you have a service account shell with SeImpersonate or SeAssignPrimaryToken privileges
• RottenPotatoNG fails because BITS is disabled or the default port is occupied
• you need configurable CLSID, port, and RPC server options for privilege escalation

When to avoid

• you are on a modern Windows version where the potato chain is patched (use newer variants like PrintSpoofer or GodPotato)
• you lack SeImpersonate or SeAssignPrimaryToken privileges
• you need a defensive or detection tool rather than an exploit
• your target is not Windows

Facets

cli-tool · maturity maintenance

penetration-testing security security penetration-testing windows windows cli privilege-escalation com-abuse potato-exploit red-team system-token-impersonation

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ohpe/juicy-potato")