CVE-2021-1675 PoC — Windows Print Spooler Remote Code Execution Vulnerability

 [4.0K]  /data/pocs/14d785c15239bf60dcec801e701ada29cb8fa55c
├── [ 152]  docker-compose.yml
├── [ 651]  Dockerfile
├── [4.0K]  Figures
│   ├── [ 20K]  AddPrinterDriverEx Opnum.png
│   ├── [ 14K]  AddPrinterDriverEx.png
│   ├── [ 41K]  AnsiCallUnicode.png
│   ├── [ 82K]  AnsiToUnicode.png
│   ├── [ 12K]  APD_1.png
│   ├── [ 42K]  APD.png
│   ├── [6.4K]  backup file.png
│   ├── [ 34K]  bittest in spl.png
│   ├── [ 46K]  copy config file.png
│   ├── [ 58K]  copy data file.png
│   ├── [6.2K]  copy file.png
│   ├── [3.5M]  exploit.gif
│   ├── [ 40K]  Function Calls.png
│   ├── [ 64K]  GetUnicodeProcAddress.png
│   ├── [ 65K]  IsElevated.png
│   ├── [ 28K]  JudgeIsElevated.png
│   ├── [4.7K]  Load Image.png
│   ├── [ 57K]  LocalAddPrinterDriverEx.png
│   ├── [ 69K]  NdrClientCall3.png
│   ├── [ 52K]  pDriverInfo.png
│   ├── [9.6K]  Print Spooler Architecture.png
│   ├── [ 88K]  restrict in async.png
│   ├── [ 36K]  restrict in rpcadd.png
│   ├── [ 24K]  RpcAsyncAddPrinterDriver Receive.png
│   ├── [ 18K]  RpcAsyncAddPrinterDriver Send.png
│   ├── [ 74K]  second time call.png
│   ├── [ 83K]  set arguments.png
│   ├── [ 73K]  SplAddPrinterDriverEx.png
│   ├── [ 23K]  spoolss uuid.png
│   ├── [5.6K]  spoolsv user.png
│   ├── [ 59K]  thread start YAddPrinterDriverEx.png
│   ├── [ 20K]  winspool call AddPrinterDriverExW.png
│   ├── [ 64K]  YIsElevated.png
│   └── [ 61K]  YIsElevationRequired.png
├── [8.3K]  main.py
├── [5.8K]  my_rprn.py
├── [ 17K]  README.adoc
└── [ 268]  smb.conf

1 directory, 40 files

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →