cube0x0/CVE-2021-1675

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1999 stars · 574 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A proof-of-concept exploit tool implementing the PrintNightmare vulnerabilities (CVE-2021-1675/CVE-2021-34527) in both C# and Python (Impacket). It enables remote or local execution of malicious DLLs against Windows Print Spooler services, including fully patched Domain Controllers with certain registry misconfigurations.

Use cases

• test if a domain controller is vulnerable to PrintNightmare
• demonstrate CVE-2021-1675 remote code execution in a pentest
• check whether PointAndPrint registry settings leave a patched machine exploitable
• execute a malicious DLL remotely via the Print Spooler
• run the exploit locally for privilege escalation testing
• verify Print Spooler patch effectiveness during a security assessment

When to choose

• you need a working PrintNightmare PoC for authorized penetration testing
• you want an Impacket-based Python implementation that runs from Linux
• you are validating Windows Print Spooler hardening and patch status
• you need both local and remote DLL execution variants of the exploit

When to avoid

• you need a hardened, maintained security tool - this is a PoC with no license and limited upkeep
• you are looking for a defensive scanner rather than an exploit
• your target is not Windows with the Print Spooler service running
• unauthorized use - this tool performs exploitation and is illegal outside authorized testing

Facets

cli-tool · maturity maintenance

penetration-testing security cli security penetration-testing windows python windows cli printnightmare cve-2021-1675 cve-2021-34527 exploit poc impacket remote-code-execution active-directory lpe linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="cube0x0/CVE-2021-1675")