Description
GodPotato is a public privilege escalation tool that abuses the .NET remoting service to gain system level privileges on Windows hosts. Red teams use it in authorized testing, and cyberattackers use it to escalate privileges after an initial compromise.
Stats
- First seen
- August 2023
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| ByteCode-MSIL.Trojan.GodPotato |
| Generic.Application.Hacktool.GodPotato.2.5BE4D95C |
| Generic.Application.Hacktool.GodPotato.2.6E013857 |
| Generic.Application.Hacktool.GodPotato.2.7319BE85 |
| Generic.Application.Hacktool.GodPotato.2.9B4606CC |
| Generic.Application.Hacktool.GodPotato.2.ADD43E3C |
| Generic.Application.Hacktool.GodPotato.2.AFD8FAD0 |
| Generic.Application.Hacktool.GodPotato.2.D4595594 |
| Generic.Application.Hacktool.GodPotato.2.DD32F041 |
| Generic.Application.Hacktool.GodPotato.2.ED18638F |
