CVE-2020-1337

This repository contains a proof-of-concept exploit for CVE-2020-1337, a Windows Print Spooler Elevation of Privilege vulnerability. The exploit leverages Windows Error Reporting to trigger a bind shell on port 1337, demonstrating local privilege escalation.

This is a working PoC for CVE-2020-1337, a Windows privilege escalation vulnerability. It exploits a write-what-where condition by manipulating printer port paths via junction points to overwrite system files.

This PoC demonstrates a binary planting attack via the Windows Print Spooler service (CVE-2020-1337), allowing arbitrary printer creation and driver installation. It leverages DLL hijacking by exploiting the spooler's insecure handling of printer drivers.

This repository contains a writeup for CVE-2020-1337, a bypass of CVE-2020-1048's patch via a Junction Directory, leading to a Local Privilege Escalation (LPE) in the Windows Print Spooler Service. The vulnerability requires low privilege access and a restart of the spooler service.

This Metasploit module exploits CVE-2020-1337, a local privilege escalation vulnerability in the Windows Print Spooler service. It abuses a file write vulnerability to overwrite a DLL in a privileged directory, achieving persistent elevation of privileges.