Top Tweets for #PrintDemon
I know it's not #PrintNightmare, but before the nightmare was the #PrintDemon. https://t.co/Brm2XygWmf
I converted it to an Atomic Test. I haven't tested it in a while, but maybe useful? Relevant?
Our DLL Hijacking room is now live on @tryhackme! Learn how to load #Empire agents with Evil-WinRM and spawn as SYSTEM using #Faxhell and #PrintDemon.
Link: https://t.co/B01Te13ef8
Like with #PrintDemon and siblings, this issue is only exploitable on Windows Servers by local attackers with ability to manage printers (e.g., Print Operators), while on Workstations every user has these privileges.
Last week we reported an arbitrary file creation vulnerability in Print Spooler to Microsoft, a local privilege elevation issue similar to #PrintDemon (CVE-2020-1048) and its siblings affecting all Windows versions from Windows 7 / Server 2008 R2 to Windows 10 2004 / Server 2019
@voidsec ha scoperto un nuovo #0-day! In questo articolo spiega molto bene come poter sfruttare l'#exploit di #PrintDemon. #cybersecurity #malwareanalisys #incidentresponse #malwareprevention #malwaredetection #digitalforensics
Vulnerability description, root cause analysis and PoC code for CVE-2020-1337 will be released today, after Microsoft's Patch Tuesday, on https://t.co/uyms2SZRfJ
#HackingPrintersForFunAndProfit #EvilPrinter CVE-2020-1300 print sub-system is hacker's gift that keeps on giving =) well-done @R3dF09 cc: @aionescu #PrintDemon
Demo of #EvilPrinter (CVE-2020-1300). Remote SYSTEM shell with just one connection attempt.
Also LPE and Sandbox Escape from Edge renderer on all modern Windows versions.
Microsoft has finally patched the decades-old Windows #PrintDemon vulnerability, but exploitable devices might still be on your network. via @csoonline
#cybersecurity
https://t.co/mAKwr9UbD7
Got no plans for this coming weekend? Come check out our free webinar! We will be looking at DLL hijacking and walking through how Invoke-#PrintDemon leverages CVE-2020-1048 & DLL hijacking for privesc
Tomorrow at 10am Pacific
#infosec #redteam
https://t.co/nfqevEdVgq
Thank you @Ax_Sharma and @CSOonline for the article on how to mitigate the #PrintDemon vulnerability featuring @KennaSecurity rockstar @jcran
The day of reckoning may have come for #PrintDemon, but organizations should still stay alert.
Our own @Jcran makes recommendations for mitigate the CVE in @CSOonline.
https://t.co/lEEvuQJbdG
The day of reckoning may have come for #PrintDemon, but organizations should still stay alert.
Our own @Jcran makes recommendations for mitigate the CVE in @CSOonline.
https://t.co/lEEvuQJbdG
Here's my analysis of the #PrintDemon #vulnerability: Its risks and how can enterprises mitigate it.
https://t.co/yFqBkrqEUV via @csoonline
#security #infosec #cybersecurity
Patch CVE-2020-1048 #PrintDemon, I do not agree with Microsoft's statement where for Latest Software Release exploitation is: "Less Likely". Pwned it today during a Red-Team :)
Un fallo de seguridad lleva presente en @Windows desde hace 24 años. Lo tienen todas las versiones del SO liberadas desde el 1996. Su nombre es #PrintDemon y está relacionado con el servicio de impresión que lleva integrado.
¡Actualiza ya tu sistema!
https://t.co/fAoaLKYlkr
@Mandiant Managed Defense found this PoC in the wild as part of an active intrusion! Process execution events containing "Generic / Text Only" sourced from unknown binaries are interesting. #printdemon #MandiantHunting
Attackers can exploit CVE-2020-1048 with a single PowerShell command:
Add-PrinterPort -Name c:\windows\system32\ualapi.dll
On an unpatched system, this will install a persistent backdoor, that won't go away *even after you patch*.
See https://t.co/9yMSWNM8VG for more details.
Come check out our free webinar on DLL hijacking. We will be using Procmon to find potentially hijackable file paths and use Invoke-PrintDemon as a case study on how to abuse it. Seats are limited!
#infosec #printdemon #redteam
https://t.co/nfqevEvw7Y
Microsoft fixes #vulnerability affecting all #Windows versions since 1996. #printdemon #CVE #infosec #cybersecurity
https://t.co/i5Syv0vBoz
The recent releases of #PrintDemon and #Faxhell really motivated us to create a #PowerShell PoC adaption.
We have seen many people dismissing the seriousness of this vulnerability & wanted to demo why everyone should care about system-level escalation.
https://t.co/taZIKIf6cs
Everyone, #PrintDemon is brand new and affects everything back to NT 4 apparently (1996)
PLEASE KEEP IN MIND IT IS ONLY LPE.
That means this requires a daisy chain attack. It also means this requires a bad actor to be ON the box.
Please don't treat this as the world is on fire
Last Seen Hashtags on Sotwe
BlackJewelsTrilogy
Seen from Spain
Borisfilealbo
Seen from Germany
BigLuci
Seen from Vietnam
BuyBHIM
Seen from Italy
BrainerdJaycees
Seen from Vietnam
transalter
Seen from Philippines
CadaUnaTieneLoSuyo
Seen from Vietnam
momson() #teenage
Seen from Chile
Biyotaklit
Seen from Vietnam
CanoasMilGrau
Seen from Spain
Most Popular Users
Elon Musk 
@elonmusk
241.1M followers
Barack Obama
@barackobama
119.1M followers
Cristiano Ronaldo
@cristiano
112.6M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.2M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.4M followers
KATY PERRY
@katyperry
88.8M followers
Taylor Swift
@taylorswift13
82.7M followers
Lady Gaga
@ladygaga
74.2M followers
Virat Kohli
@imvkohli
71.6M followers
Kim Kardashian
@kimkardashian
70.3M followers
YouTube
@youtube
68.7M followers
Neymar Jr
@neymarjr
64.5M followers
Bill Gates
@billgates
64.5M followers
The Ellen Show
@theellenshow
62.4M followers
Selena Gomez
@selenagomez
61.9M followers
CNN
@cnn
61.8M followers
X
@x
60.8M followers