Windows Print Processor Persistence

This Metasploit module establishes persistence by registering a malicious Print Processor DLL under HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\arch\Print Processors. The Print Spooler service loads configured processor DLLs at startup, causing payload execution when the spooler...

Windows Print Processor Persistence

This module establishes persistence by registering a malicious Print Processor DLL under HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Print Processors. The Print Spooler service loads configured processor DLLs at startup, causing payload execution when the spooler service starts for...