CCob/SweetPotato

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1839 stars · 234 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

SweetPotato is a C# command-line tool that collects multiple native Windows privilege escalation techniques (RottenPotato, PrintSpoofer, EfsRpc, etc.) to escalate from service accounts to SYSTEM. It supports Windows 7 through Windows 10 / Server 2019.

Use cases

• escalate from a Windows service account to SYSTEM
• run PrintSpoofer privilege escalation exploit
• leverage EfsRpc or PetitPotam for local privilege escalation
• test Windows privilege escalation during a penetration test
• spawn a process as NT AUTHORITY SYSTEM from a service account

When to choose

• you need a single tool bundling multiple potato-style Windows privilege escalation exploits
• you are doing authorized red team or CTF work on Windows targets
• you want a C#-based exploit that runs natively on Windows without extra dependencies

When to avoid

• you need privilege escalation on Linux or macOS
• you want a maintained tool with an explicit license for production use
• you are looking for defensive hardening tooling rather than offensive exploitation

Facets

cli-tool · maturity maintenance

security penetration-testing cli security penetration-testing windows windows dotnet cli privilege-escalation potato-exploits red-team system-privileges csharp

Member repositories

For agents

markdown · JSON · MCP: product_card(name="CCob/SweetPotato")