PrintNightmare in 2024 - Githubissues

GhostPack / Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Other

3.74k stars 685 forks source link

PrintNightmare in 2024 #123

Open clem9669 opened 8 months ago

clem9669 commented 8 months ago

Hi 👋 itm4n released a new blog post about misconfiguration that could lead to exploiting PrintNightmare.

The blog: https://itm4n.github.io/printnightmare-exploitation/ itm4n's powershell implementation: https://github.com/itm4n/PrivescCheck/commit/f555354146af628ae79dc5963e00f922d7f661f4

Detecting misconfiguration:

Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint RestrictDriverInstallationToAdministrators -> 0
Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint NoWarningNoElevationOnInstall -> 1
Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint UpdatePromptSettings -> 2