Ares-mythic/documentation-payload/apollo/commands/printspoofer.md

+++ title = "printspoofer" chapter = false weight = 103 hidden = false +++

{{% notice info %}} Artifacts Generated: Process Create, Process Inject, Process Kill {{% /notice %}}

Summary

Inject a printspoofer DLL to execute a given command as SYSTEM. This will only succeed if the user has SE_IMPERSONATE privileges.

This DLL is injected with respect to the current injection technique, and spawns a sacrificial process designated by the spawnto_* commands.

Usage

printspoofer [printspoofer args]

MITRE ATT&CK Mapping

• T1547

References

• https://github.com/itm4n/PrintSpoofer