SpoolSploit

SpoolSploit Una colección de exploits del spooler de impresión de Windows contenerizados con otras utilidades para explotación práctica. Resumen SpoolSploit es una colección de exploits del spooler de impresión de Windows contenerizados con otras utilidades para explotación práctica. Un par de...

CVE-2009-0229-PoC

CVE-2009-0229-PoC PoC for CVE-2009-0229 "Print Spooler Read File Vulnerability" LPE AFR related to CVE-2020-1048 Details Author: Andrei Costin [email protected] https://twitter.com/costinandrei/ PoC date: 2010-xx-xx Release date: 2020-05-14 reminded/inspired by CVE-2020-1048 - yes, I am too...

CVE-2021-34527-Scanner-Based-On-cube0x0-POC

This is a scanner for the service Windows-Print-Spooler in risk Based on CVE-2021-34527 PoC originally created by cube0x0...

Exploiting-and-Mitigating-CVE-2020-0796-SMBGhost-and-Print-Spooler-Vulnerabilities

Exploiting-and-Mitigating-CVE-2020-0796-SMBGhost-and-Print-Spooler-Vulnerabilities This repository contains detailed documentation and code related to the exploitation, detection, and mitigation of two significant vulnerabilities: CVE-2020-0796 SMBGhost and Print Spooler. The repository showcases...

CVE-2020-1337

CVE-2020-1337 CVE-2020-1337 is a bypass of PrintDemon CVE-2020-1048 ’s patch via a Junction Directory, made to remediate an Elevation of Privileges EoP\Local Privilege Escalation LPE vulnerability affecting the Windows’ Print Spooler Service. The vulnerability does require low privilege access an...

CVE-2021-1675-PrintNightmare-Analysis

Vulnerability Research: Local Privilege Escalation and RCE via Windows Print Spooler PrintNightmare / CVE-2021-1675 The repository contains a detailed technical report write-up and an analysis of the exploit concept for a critical vulnerability in the Windows Print Spooler service, which allows a...

PrintNightmare

PrintNightmare Here is a project that will help to fight against Windows security breach PrintNightmare! CVE-2021-34527 You have to know that a patch has been released by Microsoft against this breach but is not fully functional and fight only RCE Remote code execution while LPE Local privilege...

CVE-2021-1675

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

CVE-2021-34481

CVE-2021-34481 Check patch for CVE-2021-34481 Windows Print Spooler Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34481...

Disable-Spooler-Service-PrintNightmare-CVE-2021-34527

Disable-Spooler-Service-PrintNightmare-CVE-2021-34527 Simple batch script to disable the Microsoft Print Spooler service from system Run 1. Open the Command and Prompt with elevated privileges, administrative privileges are required to disable the service. 2. Run the script root@kitploit:...

CVE-2021-1675

CVE-2021-1675 - PrintNightmare DSC Mitigation PowerShell Kougyoku Gentou | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." The mitigation is to disable Print Spooler service. Well, most websites say to do this on...

PrintNightmare-LPE

CVE-2021-1675PrintNightmare system shell poc for CVE-2021-1675 Windows Print Spooler Elevation of Privilege credit: Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Ref: https://github.com/afwu/PrintNightmare windows 10 windows server 2012 Credit to all researcher who find out this bug...

printnightmare-detection-lab

PrintNightmare Threat Detection & Incident Response Lab CVE-2021-34527 📌 Overview This project documents an end-to-end security monitoring, detection engineering, and incident response implementation targeting PrintNightmare CVE-2021-34527. PrintNightmare is a critical vulnerability in the Window...

PowerShell-PrintNightmare

PowerShell-PrintNightmare A collection of scripts to help set the appropriate registry keys for CVE-2021-34527 shared as part of our blogs outlining various mitigation options. servers.ps1 contains the registry settings related to PointAndPrint. You still need to install the patch! workstations.p...

CVE-2018-8440

CVE-2018-8440 Since I noticed that metasploit is using the dll lib provided by SandboxEscaper and only has a target for x64, I decided to share my poc to the community. Of course there are much better vectors than targeting the print spooler, but I'll leave that as an exercise for the reader. Thi...

CVE-2021-34527-PrintNightmare-Workaround

CVE-2021-34527-PrintNightmare-Workaround This simple PowerShell script is in response to the "PrintNightmare" vulnerability. This was designed to give a end user the ability to stop and disable the "Print Spooler" service on their computer while awaiting a fix from Microsoft. When the service is...

CVE-2020-1048

CVE-2020-1048 POC exploit code for CVE-2020-1048PrintDemon Vulnerable Systems All Windows version below mentioned in the link are vulnerable: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048 Steps to reproduce 1. Change the variables gPortName and gInputFile presen...

PrintNightmare

PrintNightmare Python implementation for PrintNightmare CVE-2021-1675 / CVE-2021-34527 using standard Impacket. Installtion root@kitploit: $ pip3 install impacket Usage root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: printnightmare.py -h -debug -port destination por...

CVE-2021-1675_RDL_LPE

CVE-2021-1675RDLLPE CS reflective loading plugin for PrintNightMare LPE privilege escalation vulnerability. Out-of-the-box, memory loading, obfuscated driver name loading to bypass Defender/EDR. Disclaimer: This project is only for learning and communication, please use it cautiously within a...

SpoolFool

SpoolFool Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability LPE Details The provided exploit should work by default on all Windows desktop versions. Please see the blog post for full technical details here. Usage root@kitploit: PS C:\SpoolFool .\SpoolFool.exe...