PrintNightmare in 2024 - Githubissues

peass-ng / PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

https://book.hacktricks.xyz

Other

15.34k stars 3k forks source link

PrintNightmare in 2024 #410

Open clem9669 opened 5 months ago

clem9669 commented 5 months ago

Hi 👋 itm4n released a new blog post about misconfiguration that could lead to exploiting PrintNightmare.

The blog: https://itm4n.github.io/printnightmare-exploitation/ itm4n's powershell implementation: https://github.com/itm4n/PrivescCheck/commit/f555354146af628ae79dc5963e00f922d7f661f4

Detecting misconfiguration:

Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint RestrictDriverInstallationToAdministrators -> 0
Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint NoWarningNoElevationOnInstall -> 1
Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint UpdatePromptSettings -> 2