Exploit for CVE-2020-0668

kitploit · 2026-08-26

Description

Privilege escalation via printconfig.dll in Windows RASPLAP service executing a malicious DLL.

Affected software

Microsoft Windows 10 All versions

Microsoft Windows 7 All versions

Microsoft Windows 8.1 All versions

Microsoft Windows Rt 8.1 All versions

All known vulnerabilities by product

CVSS 7.8 for CVE-2020-0668

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

References

https://itm4n.github.io/cve-2020-0668-windows-service-tracing-eop

https://github.com/NotGlop/SysExec/blob/master/source/SysExec.cpp

https://github.com/Nan3r/writedacl2system/tree/master/printconfig.dll

https://github.com/Nan3r/dll/tree/master/common%20dll/run_programdata_setup.bat

Exploit Details

Modified:2026-08-26 11:37

Last Seen:2026-08-26 11:47

Reporter:KitPloit

Tags

Windowsprivilege escalationprintconfig.dllRASPLAP servicemalicious DLLservice tracing

Other exploits for CVE-2020-0668

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

CVE-2020-0668.exe

2026-09-07 KitPloitKITPLOIT

2026-09-06 KitPloitKITPLOIT

Exploit for Link Following in Microsoft

2023-06-18 Wh04m1001GITHUB

Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform

2020-12-08 Keepb1ueGITEE

Service Tracing Privilege Escalation Exploit

2020-05-09 metasploitZDTRuby

Service Tracing Privilege Escalation

2020-05-08 bwatters-r7PACKETSTORMRuby

Exploit Code

MARKDOWN18 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-NAN3R-CVE-2020-0668
# CVE-2020-0668

पॉवरशेल कार्यान्वयन, printconfig.dll का उपयोग करके विशेषाधिकार बढ़ाने के लिए।

evil dll को स्वयं परिभाषित किया जा सकता है, यहां मेरी dll c:\programdata\setup.bat फ़ाइल को निष्पादित करेगी।

## संदर्भ:

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668

https://itm4n.github.io/cve-2020-0668-windows-service-tracing-eop

## TODO：

 1. RASPLAP सेवा का उपयोग करके विशेषाधिकार बढ़ाएं https://github.com/NotGlop/SysExec/blob/master/source/SysExec.cpp

 2. RASMAN सेवा का उपयोग करके विशेषाधिकार बढ़ाएं