Markus Faerevaag

I was wondering about the following in the readme: > Injection works from Windows NT4 up to and including Windows 8, running on x86 and x64. Could you elaborate on...

I noticed that when passing a path to the NTDS.dit file, using the `ntdsSource` argument, it fails when trying to copy from the shadow. Take for instance the supplied example...

Missing Argument error

5

Hi, I am having an issue when specifying the CLSID: ``` C:\Users\asdf\Desktop> ./JuicyPotato.exe -l 1337 -z -t * -c {90F18417-F0F1-484E-9D3C-59DCEEE5DBD8} Wrong Argument: - JuicyPotato v0.1 Mandatory args: -t createprocess call:...

Maintainers wanted

9

As many some may have noticed, I am not as responsive and active as I should be. This is partly due to me not using zsh anymore (moved to fish...

Missing arithmetic operation - `xadd`

4

## Description When executing `xadd` instruction the add operation is forgotten. **Reference:** `xadd`: Ref. Intel 64 and IA-32 Architecture Software Developer's Manual Vol. 2C 5-580 **Affected instructions:** ``` 0x0fc1c0 0x640fc1c0...

Not taking mod size - `rol`, `ror`

1

## Description When executing instructions `rol` and `ror`, the count is sometimes calculated without taking the correct mod size, where size is the operand size. According to manual, the correct...

Invalid CF calculation - `xadd`

1

## Description Invalid calculation of the carry flag, `CF`, when executing `xadd` instruction with the `0xc0` as operand and prefixed as below. **Reference:** Ref. Intel 64 and IA-32 Architecture Software...

Not storing segment register - `mov` [x64]

2

## Description When attempting to move a segment register, for instance `ES` into a 64-bit register using a REX prefix, the segment register is ignored. **Reference:** Ref. Intel 64 and...

Operand address changed - `sub`

3

## Description Destination address, specified in the first operand, is changed before being written to. **Reference:** Ref. Intel 64 and IA-32 Architecture Software Developer's Manual Vol. 2B 4-652 **Affected instructions:**...

Invalid OF calculation - `sub`

2

## Description Incorrectly calculates overflow flag `OF`. **Reference:** Ref. Intel 64 and IA-32 Architecture Software Developer's Manual Vol. 2B 4-652 **Affected instructions:** ``` 0x28c0 0x29c0 0x2ac0 0x2bc0 ``` _NOTE:_ All...