Skip to main content
Artifacts Generated: Process Create, Process Inject, Process Kill

Summary

Inject a printspoofer DLL to execute a given command as SYSTEM. This will only succeed if the user has SE_IMPERSONATE privileges. This DLL is injected with respect to the current injection technique, and spawns a sacrificial process designated by the spawnto_* commands.

Usage

printspoofer [printspoofer args]

MITRE ATT&CK Mapping

  • T1547

References