Exploit for CVE-2021-1675

Exploit for Improper Privilege Management in Microsoft - CVE-2021-1675 - PrintNightmare LPE (PowerShell) is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released for the remote code execution capability and a C# rendition for local privilege escalation. The PowerShell script performs local privilege escalation (LPE) with the PrintNightmare attack technique. This has been tested on Windows Server 2016 and Windows Server 2019. It embeds a Base64-encoded GZIPped payload for a custom DLL, patched according to your arguments, to easily add a new user to the local administrators group. It also embeds methods from PowerSploit/PowerUp to reflectively access the Win32 APIs. This method does not loop through all printer drivers to find the appropriate DLL path -- it simply grabs the first driver and determines the appropriate path.