CVE-2020-1337

CVE-2020-1337 CVE-2020-1337 is a bypass of PrintDemon CVE-2020-1048 ’s patch via a Junction Directory, made to remediate an Elevation of Privileges EoP\Local Privilege Escalation LPE vulnerability affecting the Windows’ Print Spooler Service. The vulnerability does require low privilege access an...

CVE-2021-1675_PrintNightMare

PrintNightmareScanner Scanner to detect Windows Print Spooler Remote Code Execution Vulnerability CVE-2021-1675 Prerequisite's python3 python3 -m pip install -r Requirements.txt Usage python3 detectprintnightmare.py --help usage: detectprintnightmare.py -h -t TARGET -T TARGETS -c CIDR optional...

Disable-Spooler-Service-PrintNightmare-CVE-2021-34527

Disable-Spooler-Service-PrintNightmare-CVE-2021-34527 Simple batch script to disable the Microsoft Print Spooler service from system Run 1. Open the Command and Prompt with elevated privileges, administrative privileges are required to disable the service. 2. Run the script .\DisableSpooler.bat...

PrintNightmare-LPE

CVE-2021-1675PrintNightmare system shell poc for CVE-2021-1675 Windows Print Spooler Elevation of Privilege credit: Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Ref: https://github.com/afwu/PrintNightmare windows 10 windows server 2012 Credit to all researcher who find out this bug...

CVE-2021-1675_RDL_LPE

CVE-2021-1675RDLLPE CS reflective loading plugin for PrintNightMare LPE privilege escalation vulnerability. Out-of-the-box, memory loading, obfuscated driver name loading to bypass Defender/EDR. Disclaimer: This project is only for learning and communication, please use it cautiously within a...

cve-2020-1337-poc

cve-2020-1337-poc poc for CVE-2020-1337 Windows Print Spooler Elevation of Privilege Credit to all researcher who find out this bug. Ref: https://voidsec.com/cve-2020-1337-printdemon-is-dead-long-live-printdemon/ code browsed from: https://github.com/sailay1996/WerTrigger...

SpoolFool

SpoolFool Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability LPE Details The provided exploit should work by default on all Windows desktop versions. Please see the blog post for full technical details here. Usage PS C:\SpoolFool .\SpoolFool.exe SpoolFool By...

CVE-2021-34527

CVE-2021-34527 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 UPDATE June 2 2021 : Microsoft has released an advisory on CVE-2021-34527, correctly terming that specific identifier as the PrintNightmare vulnerability exploit. Previously, the community was assuming...

cve-2021-1675

〖EXP〗Ladon Printer Vulnerability Privilege Escalation CVE-2021-1675 Reproduction http://k8gege.org/p/CVE-2021-1675.html Overview On June 9, Microsoft released the June security update patch, fixing 50 security vulnerabilities, including a Windows Print Spooler privilege escalation vulnerability,...

PrintNightmare

PrintNightmare Python implementation for PrintNightmare CVE-2021-1675 / CVE-2021-34527 using standard Impacket. Installtion $ pip3 install impacket Usage Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: printnightmare.py -h -debug -port destination port -target-ip ip address -hashe...

CVE-2021-1675

From Lares Labs: Detection & Remediation Information for CVE-2021-1675 & CVE-2021-34527 🚨 Patch released: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 The patch has been confirmed to fix RCE however local priviledge escalation appears to not be patched as of yet. Therefore...

CVE-2021-34527

PrintNightmare CVE-2021-34527 This version of the PrintNightmare exploit is based on the code created by Cube0x0, with the following features: Ability to target multiple hosts. Built-in SMB server for payload delivery, removing the need for open file shares. Exploit includes both MS-RPRN & MS-PAR...

PrintNightmare

PrintNightmare Here is a project that will help to fight against Windows security breach PrintNightmare! CVE-2021-34527 You have to know that a patch has been released by Microsoft against this breach but is not fully functional and fight only RCE Remote code execution while LPE Local privilege...

SpoolSploit

SpoolSploit A collection of Windows print spooler exploits containerized with other utilities for practical exploitation. Summary SpoolSploit is a collection of Windows print spooler exploits containerized with other utilities for practical exploitation. A couple of highly effective methods would...

CVE-2021-1675

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

disable-RegisterSpoolerRemoteRpcEndPoint

disable-RegisterSpoolerRemoteRpcEndPoint Workaround for Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-34527. See: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Update 2021-07-08: Microsoft released a patch Microsoft already released a patch for this...

CVE-2026-85933

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-85847

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network...

CVE-2026-85933

A Use after free vulnerability exists in the Windows Print Spooler Components . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or remediation steps are provided in th...

CVE-2026-85847

An out-of-bounds read vulnerability exists in the Windows Print Spooler Components . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and carries a Medium base severity (CVSS 3.1 score of 6.5). Exploitation details are ...