Exploit PrintNightmare vulnerability to add local administrator
Tactic: Privilege-escalation
Stages and executes Invoke-Nightmare used by Conti to gain local admin.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.
LoginTest this TTP
Download Operator (1.7.1)
Test this TTP using one of our Operator chainsUse PrintNightmare & ZeroLogon exploits to gain privileges and extract the krbtgt NTLM hash from a DC.
Conti Privilege Escalation and Persistence
2022-01-25
Follow @preludeorg on Twitter for new chains and more.
Join the Prelude Discord to discuss chains and more.
Keep up to date with code changes and community activity on Github