SweetPotato icon indicating copy to clipboard operation
SweetPotato copied to clipboard

SweetPotato error

Open init5-SF opened this issue 2 years ago • 5 comments

Hi there, any idea why is it throwing this error? (I am trying this with a user that has SeImpersonate privilege & the target is Windows 11)

C:\Users\lowshell\Desktop>SweetPotato.exe -e EfsRpc -p C:\Windows\System32\calc.exe
SweetPotato by @_EthicalChaos_
  Orignal RottenPotato code and exploit by @foxglovesec
  Weaponized JuciyPotato by @decoder_it and @Guitro along with BITS WinRM discovery
  PrintSpoofer discovery and original exploit by @itm4n
  EfsRpc built on EfsPotato by @zcgonvh and PetitPotam by @topotam
[+] Attempting NP impersonation using method EfsRpc to launch C:\Windows\System32\calc.exe
Could not load file or assembly 'NtApiDotNet, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null' or one of its dependencies. The system cannot find the file specified.
[!] No authenticated interception took place, exploit failed

EDIT: I've done some troubleshooting and figured that it needs NtApiDotNet.dll to be present in the same folder. Is there a way the dll can be embedded in the tool's exe somehow?

Thanks!

init5-SF avatar Jan 19 '23 21:01 init5-SF

A release build will leverage dnMerge to produce a merged binary

CCob avatar Jan 22 '23 21:01 CCob

A release build will leverage dnMerge to produce a merged binary

That would be super! Any estimation on the timeframe?

init5-SF avatar Feb 10 '23 18:02 init5-SF

It's already there, just make a release build.

CCob avatar Feb 16 '23 23:02 CCob

I tried making a release build but ended up with a lot of errors. Any idea what I'm doing wrong? Thank you

image

init5-SF avatar Feb 17 '23 11:02 init5-SF

I tried making a release build but ended up with a lot of errors. Any idea what I'm doing wrong? Thank you

image

You need to install the dnMerge package in your visual studio solution. For me version 0.5.13 was automatically installed because it's required in the .csproj file (line 107) and I had the same issue as you. But after updating it to the latest version (0.5.15) it worked correctly ! @CCob should probably update the .csproj file to the last version.

Darktortue avatar Feb 22 '23 17:02 Darktortue