the-bread-code VS PrintNightmare

With the recipe in video format I can’t tell exactly what you did, without spending 30 mins to watch the video. Here is another recipe from that same guy with lots of detail and images. Same recipe ? https://github.com/hendricius/the-bread-code/blob/master/recipes/sourdough/basic-sour-dough.md

The Bread Code (YouTube) is an amazing resource as are his posts. https://github.com/hendricius/the-bread-code/blob/master/basics/common-problems-faq.md

Followed the bread code for the most part.

I'm basically following Hendrik' recipe here.

Here you go: https://github.com/hendricius/the-bread-code

[(https://github.com/afwu/PrintNightmare)

Based on this writeup of the exploit https://github.com/afwu/PrintNightmare I think it should actually prevent an attack since it would stop the malicous driver from being loaded onto the target but it's probably the best to wait for the guys at huntress when they get a little more breathing space with Kaseya.

It is exploited by calling a remote procedure call function called rpcAddPrinterDriver. There is a buggy check that lets a user without the adequate privileges to load a driver on the remote system.

Since remote functions can be called locally as well, this is both a remote code execution (RCE) and local privilege escalation (LPE). For more information, see the original source: https://github.com/afwu/PrintNightmare