also very likely this is also is a windows sandbox escape- there is this nasty printer driver that make printing on host possible. Last i checked i could also print exe files on the host in locations guest could write.
Show this thread
If the patch didnt work this is worst vulnerability in a long time. When you enable passwordless sharing you enable guest account that can also printhttps://twitter.com/gentilkiwi/status/1410066827590447108 …
This #printnightmare / CVE-2021-1675 is really serious 
Just adapted/simplified original POC then:
*From Remote standard user to SYSTEM*
Here on a domain controller, but valid on all systems with RPC to spooler available, remote or local
disable service now (no patch yet) pic.twitter.com/qpUFgPUZyh
Just adapted/simplified original POC then:
*From Remote standard user to SYSTEM*
Here on a domain controller, but valid on all systems with RPC to spooler available, remote or local
disable service now (no patch yet) pic.twitter.com/qpUFgPUZyh
Show this thread
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
This Tweet is unavailable.
-
I find it way more likely microsoft fucks up then Benjamin do
End of conversation
-
-
-
Okay- this indeed is starting to look like worst security failure in many years. It happening on ITSEC BIKINI day is perfect Remember- the name bikini was chosen to provoke as it refers to the bikini island. Both today and bikini island have in common that shit went NUCLEAR bad
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.