Sploitus

Exploit for CVE-2021-1675

githubexploit · 2021-09-01

Exploit Code

README28 lines
## https://sploitus.com/exploit?id=14B62DA4-FBC4-5B89-AB9F-9F8E3505AFAD
# CVE-2021-1675_RDL_LPE  
A CS reflection loading plugin for the PrintNightMare LPE privilege escalation vulnerability. Ready-to-use, bypasses defenses/EDRs through obfuscated driver names via memory loading.  
> Disclaimer:  
> This project is solely for learning and discussion purposes. Please use it within reasonable authorization. ## Quick Start  

Download this project:  
Cobalt Strike loading plugin  
![image-20210901185333955](README.assets/image-20210901185333955.png)  

Usage instructions:  
```bash
> print_night_mare_lpe dllpath  
> elevate -> PrintNightMare-1675 -> choose your listener -> exploit  
```  

## Effect demonstration  
Default environment: WinSer 2009 (Windows Defender), WinServer 2016 (Windows Defender).  
Custom DLL path:  
![image-20210901191711862](README.assets/image-20210901191711862.png)  

elevate module:  
![image-20210901191145466](README.assets/image-20210901191145466.png)  

> If the result is 0, it indicates successful exploitation. The implementation of “elevate” involves obfuscating driver names, which may not be very stable. Try multiple times, or use `print_night_mare_lpe dllpath`.  
> Currently, only 64-bit versions have been tested. The “elevate” module also only supports 64-bit versions; 32-bit versions are recommended to use `print_night_mare_lpe`.  
> This project is purely for fun and enjoyment. ## Vulnerability mitigation  
> Update your system to the latest version promptly.