ohpe / juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
https://ohpe.github.io/juicy-potato/
GNU General Public License v3.0
2.42k stars 466 forks source link

Missing Argument error #5

Open mfaerevaag opened 5 years ago

mfaerevaag commented 5 years ago

Hi,

I am having an issue when specifying the CLSID:

C:\Users\asdf\Desktop> ./JuicyPotato.exe -l 1337 -z -t * -c {90F18417-F0F1-484E-9D3C-59DCEEE5DBD8}          
Wrong Argument: -                                                                                                
JuicyPotato v0.1                                                                                                 
Mandatory args:                                                                                                  
-t createprocess call: <t> CreateProcessWithTokenW, <u> CreateProcessAsUser, <*> try both                        
-p <program>: program to launch                                                                                  
-l <port>: COM server listen port                                                                                
Optional args:                                                                                                   
-m <ip>: COM server listen address (default 127.0.0.1)                                                           
-a <argument>: command line argument to pass to program (default NULL)                                           
-k <ip>: RPC server ip address (default 127.0.0.1)                                                               
-n <port>: RPC server listen port (default 135)                                                                  
-c <{clsid}>: CLSID (default BITS:{4991d34b-80a1-4291-83b6-3328366b9097})                                        
-z only test CLSID and print token's user  

Works fine if I omit the -c {..} option.

Have you experienced this?

ohpe commented 5 years ago

-p is a mandatory argument, maybe it's that the problem.

mfaerevaag commented 5 years ago

I'm not sure that is true, as the test-clsid.bat script manages fine without it: https://github.com/ohpe/juicy-potato/blob/master/Test/test_clsid.bat#L8

SagiSatish commented 4 years ago

I got the same error. For some reason, it worked when i called it with "cmd /c".

PS C:\users\test\Desktop> .\jp.exe -t * -p C:\users\test\Desktop\test.bat -l 9001 -c {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Wrong Argument: -
JuicyPotato v0.1 

Mandatory args: 
-t createprocess call: <t> CreateProcessWithTokenW, <u> CreateProcessAsUser, <*> try both
-p <program>: program to launch
-l <port>: COM server listen port

Optional args: 
-m <ip>: COM server listen address (default 127.0.0.1)
-a <argument>: command line argument to pass to program (default NULL)
-k <ip>: RPC server ip address (default 127.0.0.1)
-n <port>: RPC server listen port (default 135)
-c <{clsid}>: CLSID (default BITS:{4991d34b-80a1-4291-83b6-3328366b9097})
-z only test CLSID and print token's user
PS C:\users\test\Desktop> cmd /c "jp.exe -t * -p C:\users\test\Desktop\test.bat -l 9001 -c {8BC3F05E-D86B-11D0-A075-00C04FB68820}"
Testing {8BC3F05E-D86B-11D0-A075-00C04FB68820} 9001
......
[+] authresult 0
{8BC3F05E-D86B-11D0-A075-00C04FB68820};NT AUTHORITY\SYSTEM

[+] CreateProcessWithTokenW OK
Pusher91 commented 3 years ago

If you are using this with powershell (i.e PS C:\users\test\Desktop>) you will get this error. cmd /c does it make it work within a powershell command prompt though.

Esra11 commented 1 year ago

You should put the CLSID betweeb double quotations, like this: "{90F18417-F0F1-484E-9D3C-59DCEEE5DBD8}" Although I see not everyone had to do this