ripits-sec/couchpotatoWindows privilege escalation tool that patches ETW and AMSI and uses indirect syscalls to abuse SeImpersonatePrivilege, escalating service accounts or admins to NT SYSTEM.
Make sure you compile on your own to avoid detection.. certain strings are XOR at compile time.. I will not be publishing anymore binaries.
Usage: CouchPotato.exe ip port
Patches ETW & AMSI and uses indirect syscall to abuse SeImpersonatePrivilege.
Service account || Admin -> NT system
