Return

$ tldr Network printer credential capture → Server Operators service config

·	·
Operating system	Windows
Difficulty	Easy
Vector	Windows privesc
IP	`10.10.11.108`
Retirement date	2022-05-05
Skills	Abusing Printer Abusing Server Operators Group Service Configuration Manipulation

Writeups

Language	Author	Format	Link
🇪🇸 ES	S4vitar	Vídeo	Open
🇪🇸 ES	El Pingüino de Mario	Vídeo	Open
🇬🇧 EN	0xdf	Texto	Open
🇬🇧 EN	IppSec	Vídeo	Open

Did the official writeup not work? Found a smarter trick? Share it here — comments live in GitHub Discussions.

Last updated: 2026-06-15