Sploitus

Exploit for Print Spooler Remote DLL Injection

CVE-2021-1675CVE-2021-34527

metasploit · 2021-07-08

Exploit Code

ruby15 lines
## https://sploitus.com/exploit?id=MSF:AUXILIARY-ADMIN-DCERPC-CVE_2021_1675_PRINTNIGHTMARE-
The print spooler service can be abused by an authenticated remote attacker to load a DLL through a crafted
          DCERPC request, resulting in remote code execution as NT AUTHORITY\SYSTEM. This module uses the MS-RPRN
          vector which requires the Print Spooler service to be running.
### Module Options

```
    msf > use auxiliary/admin/dcerpc/cve_2021_1675_printnightmare
    msf auxiliary(cve_2021_1675_printnightmare) > show actions
        ...actions...
    msf auxiliary(cve_2021_1675_printnightmare) > set ACTION < action-name >
    msf auxiliary(cve_2021_1675_printnightmare) > show options
        ...show and set options...
    msf auxiliary(cve_2021_1675_printnightmare) > run
```