mirror of
https://github.com/Aryma-f4/Ares-mythic.git
synced 2026-06-12 10:54:12 +00:00
28 lines
647 B
Markdown
28 lines
647 B
Markdown
+++
|
|
title = "printspoofer"
|
|
chapter = false
|
|
weight = 103
|
|
hidden = false
|
|
+++
|
|
|
|
{{% notice info %}}
|
|
Artifacts Generated: Process Create, Process Inject, Process Kill
|
|
{{% /notice %}}
|
|
|
|
## Summary
|
|
Inject a [printspoofer](https://github.com/itm4n/PrintSpoofer) DLL to execute a given command as SYSTEM. This will only succeed if the user has `SE_IMPERSONATE` privileges.
|
|
|
|
This DLL is injected with respect to the current injection technique, and spawns a sacrificial process designated by the `spawnto_*` commands.
|
|
|
|
## Usage
|
|
```
|
|
printspoofer [printspoofer args]
|
|
```
|
|
|
|
## MITRE ATT&CK Mapping
|
|
|
|
- T1547
|
|
|
|
## References
|
|
|
|
- https://github.com/itm4n/PrintSpoofer |