All right.
So on to the potato attacks.
Now fox glove security is the blog of choice here as they release the full details on what the potato
attacks are.
Now if you're into the nerdy stuff I'm going to link this.
You can come down here and read all the fine details on how they created this exploit and how it fully
works.
But what we really need to know at a high level is these top three things and really number three is
what we're looking for.
So it says hey to describe this at a high level we're gonna trick the authorities system account into
authenticating visa and tell them to a DCP endpoint we control.
So we control a CPM point the man in the middle.
This authentication attempt to locally negotiate a security token for the anti authority system account.
This is done through a series of windows api calls last one impersonate the token that we've created.
This can only be done if the attackers current account has the privilege to impersonate security tokens.
This is usually true of most service accounts and not true of most user level accounts.
So if you take control of a service account you might just have this impersonal token so let's take
another look at this.
This is juicy potato.
It just says it's a sugared version of rotten potato.
It's just another version of this and a another exploit.
So again you're gonna come in here and you're gonna see Hey juicy potato.
Well it's leveraging the SC impersonate or the SC assign primary token.
These are the big things we need to be on the lookout for.
So you're gonna see this come up quite a bit especially on Hack the box or those other CTF type machines
where you're on it and you're just like Hey I'm gonna see if this is vulnerable I'm gonna check my probes
and this could be just a quick game over.
So you want to check these see if there's a vulnerability there and just get used to doing they get
prints process or the the.
Who am I.
Slash prefers process.
So from here now we're going to jump into hack the box.
So what I want you to do is I'm going to come over here.
I want you to go ahead and scan Jeeves and try to attack it.
Now I fully believe that you should be able to get the low level user by yourself Jeeves is a great
example of things that I actually see a lot in internal assessments.
So I'll talk about that in the next video but very common attack that I see in internal assessments
still to this day.
And we'll talk about why it's bad why it's dangerous.
And then we'll see how to escalate this box as well.
So I will catch you over in the next video when we do the low level user walkthrough for Jeeves.