关联漏洞
标题:Microsoft Windows Print Spooler Components 安全漏洞 (CVE-2021-1675)Description:Microsoft Windows Print Spooler Components是美国微软（Microsoft）公司的一个打印后台处理程序组件。 Microsoft Windows Print Spooler Components存在安全漏洞。以下产品和版本受到影响：Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for AR
Description
Working PowerShell POC
介绍
# CVE-2021-1675-PrintNightmare
Working PowerShell POC
Powershell script is copied from https://github.com/calebstewart/CVE-2021-1675
Respect for Caleb Stewart and John Hammond.
I just wanted to have working poc close at hand. Ive added my custom DLL and an obfuscated version of powershell script.
Obfuscated script loads DLL named "printed.dll" from "C:\windows\tracing" directory.
文件快照
[4.0K] /data/pocs/13915b6c5971ec2365b69563b36649a03d364090
├── [4.0K] MyDLL2
│ ├── [ 421] MyDLL2.cpp
│ ├── [ 617] MyDLL2.h
│ ├── [6.9K] MyDLL2.vcxproj
│ ├── [1.0K] MyDLL2.vcxproj.filters
│ ├── [174K] printer_clean.ps1
│ └── [171K] printer_obf.ps1
├── [1.4K] MyDLL2.sln
└── [ 390] README.md
1 directory, 8 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮件到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对 POC 代码进行快照，为了长期维护，请考虑为本地 POC 付费/捐赠，感谢您的支持。