CVE-2021-1675 PoC — Windows Print Spooler Remote Code Execution Vulnerability

Source

https://github.com/ptter23/CVE-2021-1675

Associated Vulnerability

Title:Windows Print Spooler Remote Code Execution Vulnerability (CVE-2021-1675)
Description:Windows Print Spooler Remote Code Execution Vulnerability

Description

CVE-2021-1675: ZERO-DAY VULNERABILITY IN WINDOWS PRINTER SERVICE WITH AN EXPLOIT AVAILABLE IN ALL OPERATING SYSTEM VERSIONS

Readme

# CVE-2021-1675
CVE-2021-1675: ZERO-DAY VULNERABILITY IN WINDOWS PRINTER SERVICE WITH AN EXPLOIT AVAILABLE IN ALL OPERATING SYSTEM VERSIONS
Let me provide a onf the method I found in order to mitigate that waitting for MS release a official patches. 
Run as Administrator in Windows Powershell
Note: Servers.txt > Include all servers from you domain exclude a servers has a print server role installed

$server= Get-Content C:\Script\Servers.txt
Stop-Service -InputObject $(Get-Service -Computer $server -Name spooler)
Set-Service -Name Spooler -StartupType Disabled

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!