PrintNightmare in 2024
clem9669 opened this issue Β· comments
clem9669 commented
Hi π
itm4n released a new blog post about misconfiguration that could lead to exploiting PrintNightmare.
The blog: https://itm4n.github.io/printnightmare-exploitation/
itm4n's powershell implementation: itm4n/PrivescCheck@f555354
Detecting misconfiguration:
- Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint RestrictDriverInstallationToAdministrators -> 0
- Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint NoWarningNoElevationOnInstall -> 1
- Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint UpdatePromptSettings -> 2