aaron-kidwell/couchpotatoWindows privilege escalation tool that abuses SeImpersonatePrivilege via indirect syscalls, patching ETW and AMSI to elevate from service account or admin to NT SYSTEM.
Make sure you compile on your own to avoid detection.. certain strings are XOR at compile time.. I will not be publishing anymore binaries.
Usage: CouchPotato.exe ip port
Patches ETW & AMSI and uses indirect syscall to abuse SeImpersonatePrivilege.
Service account || Admin -> NT system
