Want to test #printnightmare (ep 4.x) user-to-system as a service?🥝
(POC only, will write a log file to system32)
connect to \\printnightmare.gentilkiwi.com with
- user: .\gentilguest
- password: password
Open 'Kiwi Legit Printer - x64', then 'Kiwi Legit Printer - x64 (another one)'
(POC only, will write a log file to system32)
connect to \\printnightmare.gentilkiwi.com with
- user: .\gentilguest
- password: password
Open 'Kiwi Legit Printer - x64', then 'Kiwi Legit Printer - x64 (another one)'
You can prevent this behavior by settings some parameters/GPO:
'Package Point and print - Approved servers'
> docs.microsoft.com/troubleshoot/w…
> admx.help/?Category=Wind…
Of course, disable outbound access to CIFS/SMB/RPC...
'Package Point and print - Approved servers'
> docs.microsoft.com/troubleshoot/w…
> admx.help/?Category=Wind…
Of course, disable outbound access to CIFS/SMB/RPC...
Very bad impersonation when: docs.microsoft.com/windows-hardwa…
And the magic 🪄
Does it remind you and old #printnightmare CVE with DataFile and ConfigFile ?
I'm sure it does.
Does it remind you and old #printnightmare CVE with DataFile and ConfigFile ?
I'm sure it does.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
