calebstewart / cve-2021-1675 Goto Github PK

View Code? Open in Web Editor NEW

969.0 969.0 232.0 132 KB

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

PowerShell 98.96% C++ 0.64% C 0.40%

cve-2021-1675's People

Contributors

Stargazers

Watchers

Forkers

da3mons stefanoratto mortals-tx thelivestep puvipavan hanhctf scriptidiot htoochonaung askyeye potat0chips 3m1za4 chosenonehacks zha0 zpaav sinw0lf synackpwn23 maduraraj 1337g duckwed jermainlaforce c0de3 walexzzy curtishoughton raystyle lexus89 super-organism xenov-x cocaman l1kw1d avi8892 hritish42 zhouzu vulnmachines offensivelearning alainw68 virot catz1301 mrothbart johnwax san3ncrypt3d michirapper jordanpotti venom hmidani-abdelilah mutedmouse kurosaru wuxueeee halitakaydin mlynchcogent cybersecops wrathfuldiety dannymas grab0id jtsamas itsaza squid22 dfw1n papadope-zz yalonso7 phuong39 fengjixuchui jhb92 thx0701 ykankaya silentsoul04 theopsecguy nocomp rosenstein talibosmani ruyueattention elprofesor123 1xhero sarvex z3f1r0 mclbn witawat anacosteira bravery9 eduquintanilha luis-soares dutchcyberguy 4v4loon cjjduck ione25 pyonghe jr69ss gist4ray therawman malyshusness bsrinivasguptha 0x023 andrea-mariadb jonathan1727 niebardzo init5-sf legionxkp want2live233 rober710 crackercat l0rd-v0ldem0rt

cve-2021-1675's Issues

Windows 10 Version 20H2

I ran the program on Windows 10 20H2 and I was presented with an error.

Invoke-Nightmare : [!] AddPrinterDriverEx failed.

PS C:\Users\test\Desktop\CVE-2021-1675-main\CVE-2021-1675-main> Invoke-Nightmare -NewUser "Berk" -NewPassword "TestBerk"
[+] created payload at C:\Users\test\AppData\Local\Temp\103\nightmare.dll
[+] using pDriverPath = "C:\Windows\System32\DriverStore\FileRepository\ntprint.inf_amd64_3138b2c823dd1ea9\Amd64\mxdwdrv.dll"
Invoke-Nightmare : [!] AddPrinterDriverEx failed
At line:1 char:1

Invoke-Nightmare -NewUser "Berk" -NewPassword "TestBerk"

  + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
  + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Invoke-Nightmare

Missing ASCII art

win 10 19042 - not working

works perfectly on win 10 - 18363.592 domain controlled pc

but not working on Version 10.0.19042.1052 tested on 3 different pc.

Invoke-Nightmare : [!] AddPrinterDriverEx failed

Hi!
thanks for the poweshell implementation!
I have a problem with exploit which outputs the following:
Invoke-Nightmare : [!] AddPrinterDriverEx failed At line:1 char:1

Invoke-Nightmare -DLL "C:\CVE-2021-1675\adduser.dll" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Invoke-Nightmare

trying on windows server 2016 with print spooler enabled.

Would you recommend anything I could do to resolve this? Thanks!

Creation of user fails if password complexity not respected

The log says everything is fine

but the user is not created, because the password was not policy compliant.
There should be a check if the user is really created or just the exploit has run (I saw that the DLL code contains no check on user creation and adding to the group).