CVE-2021-1675

PrintNightmare CVE-2021-1675 This Zeek script detects successful RpcAddPrinterDriver,Ex DCE RPC events, which are required to successfully exploit the vulnerability. Tests are based on exploit PCAP from Lares Lab. Tested with Zeek versions 3.0.2 and 4.0.1. Notices PrinterDriverChangedSuccessfully...

printerbugnew

Pure RPC over TCP Printer Spooler Trigger For Windows 11 22H2+ / Windows Server 2025 Usage root@kitploit: printerbugnew.py username password domain attackerhost tcpport Examples Anonymous connection root@kitploit: printerbugnew.py 192.168.1.100 With credentials root@kitploit: printerbugnew.py...

CVE-2021-1675-PrintNightmare

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

CVE-2021-1675-LPE-EXP

CVE-2021-1675-LPE-EXP Simple LPE Exploit of CVE-2021-1675 Usage root@kitploit: CVE-2021-1675-LPE.exe C:\test\MyPigDLL.dll MyPigDLL.dll,is a test DLL which will create C:\test.txt if succeed Notice 1. Add EnumPrinterDriversW for get pDriverPath, so We dont need change the "hardcode Driver path"...

CVE-2023-22960

PoC para CVE-2023-22960 Detalles PoC para CVE-2023-22960 que descubrí. Esta vulnerabilidad permite a un atacante eludir el mecanismo de prevención de fuerza bruta de credenciales de la interfaz del Servidor Web Integrado de todos los modelos de impresoras Lexmark que tengan una versión de firmwar...

printix-CVE-2022-29551

CVE-2022-29551 Simple Release | Print Friendly A "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability to install malicious printer drivers...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

pytmipe

PYTMIPE & TMIPE PYTMIPE PYthon library for Token Manipulation and Impersonation for Privilege Escalation is a Python 3 library for manipulating Windows tokens and managing impersonations in order to gain more privileges on Windows. TMIPE is the python 3 client which uses the pytmipe library...

CVE-2022-30206

CVE-2022-30206 This is the PoC for CVE-2022-30206. Introduction Perform the following operations to arbitrary file deletion： 1. Run the addprinter.exe to create a printer and set the SpoolDirectory in C:\Users\Public\tmp\1. 2. Run the FileLock.exe TargetFile to redirect .SHD file to TargetFile an...

PRETty

PRETty "PRinter Exploitation Toolkit" LAN automation tool It's just a python wrapper for PRET... actually it's really just a for loop PRETty is useful when a large number of printers are present on a network. Instead of scanning, logging, and manually running PRET againt each individual printer,...

CVE-2021-3438

包含哪些内容？ CVE-2021-3438detection v2sccm.ps1 是一个通过 SCCM 运行以获取受管理设备漏洞小型报告的脚本。 CVE-2021-3438detection.ps1 是一个在受管理设备上手动或远程运行的脚本。 CVE-2021-3438remediation.ps1 是一个用于检查并在检测到易受攻击的驱动程序时运行安装程序的脚本。 HP-Samsung.exe 是 HP/Samsung 修复安装程序 Xerox 是 Xerox 修复安装程序。 如何执行这些脚本？ 即时运行： root@kitploit: PS...

RpcAuthnLevelPrivacyEnabled

Managing deployment of RPC printer association changes for CVE-2021-1678 KB4599464 Windows printer sharing error download and run: https://github.com/alvaciroliveira/RpcAuthnLevelPrivacyEnabled/blob/main/RpcAuthnLevelPrivacyEnabled.reg CREDITS TO:...

nmap-printer-nse-scripts

This repository does not have a README...

CVE-2021-43471

CVE-2021-43471 Denial of service vulnerability caused by unauthorized access to Canon printers Affect product: LBP223 Time: 2021.11.3 The System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a...

concealed_position

Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...

concealed_position

Posición Oculta Posición Oculta es un ataque de escalada de privilegios locales contra Windows que utiliza el concepto de "Trae tu propia vulnerabilidad". Específicamente, Posición Oculta CP utiliza la lógica tal como fue diseñada de paquete punto e impresión en Windows que permite a un usuario c...

canon-tools

canon-tools Tools used for decrypting Canon PIXMA printers firmwares. For more information about the background, please refer to the following blogpost: https://synacktiv.com/publications/treasure-chest-party-quest-from-doom-to-exploit References This work was inspired by Contextis research...

kyocera-cve-2022-1026_SOAP1.1

Kyocera cve-2022-1026 soap1.1 Authorized testing only. This project is provided for educational and defensive validation purposes in environments you own or have explicit permission to test. Do not use against systems you do not own or administer. A Kyocera printer exposure check and data-retriev...

PRET

PRET - Printer Exploitation Toolkit Is your printer secure? Check before someone else does... PRET is a new tool for printer security testing developed in the scope of a Master's Thesis at Ruhr University Bochum. It connects to a device via network or USB and exploits the features of a given...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 A streamlined Bash exploit for CVE-2023-27350. This script automates authentication bypass, environment preparation, and command injection via the PaperCut printer scripting engine. Visual Proof Basic rce: Triggering a reverse shell: Quick Start root@kitploit:...