discovered 03 Aug 2026
RoguePotato
→ View on GitHubRoguePotato is a Windows Local Privilege Escalation tool that exploits a service account to gain system-level access. Its primary use case is to facilitate remote command execution by leveraging network redirectors and customizable parameters, such as class identifiers (CLSIDs) and named pipes. Notable features include the ability to run the RogueOxidResolver locally or on a remote machine, along with options for randomizing pipe names to obfuscate the attack's execution.