PATCHAPALOOZA-whoami-chmod777/CVE-2021-1675-CVE-2021-34527

PATCHAPALOOZA WORKING POC

Exploit for CVE-2021-34527 - Microsoft Windows 10 1507 < 10.0.10240.18969 - Remote Code Execution

AI Analysis

This repository contains a functional PowerShell exploit for CVE-2021-1675 (PrintNightmare), which allows local privilege escalation by adding a new local administrator user via a malicious printer driver. The exploit includes a custom DLL payload and leverages the Windows Print Spooler service to execute arbitrary code as NT AUTHORITY\SYSTEM.

Attack Type

LPE

Complexity

moderate

Reliability

reliable

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1548 - Abuse Elevation Control Mechanism

Loading exploit code...

Download ZIP Password: eip

Source

Platform Patchapalooza