CVE-2022-30206

CVE-2022-30206 Questa è la PoC per CVE-2022-30206. Introduzione Eseguire le seguenti operazioni per l'eliminazione arbitraria di file: 1. Eseguire addprinter.exe per creare una stampante e impostare la SpoolDirectory in C:\Users\Public\tmp\1. 2. Eseguire FileLock.exe TargetFile per reindirizzare ...

Windows SpoolFool Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CVE-2022-21999 SpoolFool Privesc', 'Description' = %q The Windows Print Spooler has a privilege escalation vulnerability that can be leveraged to...

CVE-2022-21999 SpoolFool Privesc

The Windows Print Spooler has a privilege escalation vulnerability that can be leveraged to achieve code execution as SYSTEM. The SpoolDirectory, a configuration setting that holds the path that a printer's spooled jobs are sent to, is writable for all users, and it can be configured via...