Invoke-HiveNightmare

Invoke-HiveNightmare PowerShell-based PoC for CVE-2021-36934, which enables a standard user to be able to retrieve the SAM, Security, and Software Registry hives in Windows 10 version 1809 or newer. Situation In specific versions of Windows 10, standard users have read/execute rights to files in...

CVE-2021-36934

CVE-2021-36934 C implementation of CVE-2021-36934 also called HiveNightmare/SeriousSAM with built-in parser...

sysmon-config

sysmon-config | Un archivo de configuración de Sysmon Esta es una versión bifurcada fork y modificada del sysmon config de @SwiftOnSecurity. Comenzó siendo simplemente una copia del repositorio original. Hemos fusionado la mayoría de las más de 30 pull requests abiertas. De este modo, hemos...

Invoke-HiveDreams

Invoke-HiveDreams A capability to identify and remediate CVE-2021-36934 HiveNightmare...

CVE-2021-36934

CVE-2021-36934 HiveNightmare aka SeriousSAM...

Why-so-Serious-SAM

PoC del exploit 'Fileless' de HiveNightmare: Tabla de contenidos Overview Features Lab Simulation Example Reconnaissance with Google Dorks LOLBins Overview Fileless Dropper Embedding Exploiting Print Spooler & HiveNightmare Reflective DLL Injection MITRE ATT&CK Mapping Detection & Mitigation Lega...

oxide_hive

Oxide Hive An exploit for the HiveNightmare/SeriousSAM vulnerability that allows you to read registry hives containing sensitive data without admin privileges. If that doesn't sound like privilege escalation I don't know what does. Usage After building the exploit with cargo build and retrieving...

CVE-2021-36934

CVE-2021-36934 CVE-2021-36934 HiveNightmare verificador de vulnerabilidad y solución alternativa Flujo El script tiene el siguiente flujo: Requiere ejecutarse con privilegios de Administrador Comprueba si la versión de Windows 10 está afectada por la vulnerabilidad. SI está afectado por la...

PyNightmare

PyNightmare PoC for CVE-2021-36934 Aka HiveNightmare/SeriousSAM fully written in python3 Explanation CVE-2021-36934 is a recently discovered vulnerability found by @jonasLyk allowing non-admin users to copy all registry hives which contain very private information like hashes which could lead to...

CVE-2021-36934

CVE-2021-36934 Usage Detection root@kitploit: .\Get-HiveNightmareStatus.ps1 Detection for management tools that need True/False output root@kitploit: .\Get-HiveNightmareStatus.ps1 -PostureCheck Remediation root@kitploit: For initial SAM fixes and vss removal .\Get-HiveNightmareStatus.ps1 -Remedia...

SeriousSam

SeriousSam HiveNightmare, también conocido como SeriousSam, escalada de privilegios local en Windows – CVE-2021-36934...

CVE-2021-36934

CVE-2021-36934 Explotador automático de SeriousSAM Requisitos HiveNightmare, ejecutable o un equivalente en DLL del mismo el equivalente en DLL requeriría algunas modificaciones de código para ejecutarlo mediante rundll32, esto podría ser útil cuando te encuentres con entornos applocker. dump.exe...

CVE-2021-36934-HiveNightmare-Lab

CVE-2021-36934 HiveNightmare - 教育实验室 🎯 目标 在受控的实验室环境中复现并分析 HiveNightmare 漏洞。 📋 目录 漏洞描述 实现 演示 实验室配置与工具 利用步骤 缓解措施 演示 结论 参考资料 1. 漏洞描述 CVE-2021-36934，别称 “SeriousSAM” 或 “HiveNightmare”，是一个本地权限提升 LPE 漏洞，影响从 1809 版起的 Windows 10、Windows 11 初始版本，以及 Windows Server 2019 和...

Unpatched Windows 10 Zero-Day Allows Privileged File Access

An unpatched Windows security vulnerability could allow information disclosure and local privilege escalation LPE, researchers have warned. The issue CVE-2021-24084 has yet to get an official fix, making it a zero-day bug – but a micropatch has been rolled out as a stop-gap measure. Security...

Microsoft Windows Elevation of Privilege Vulnerability (HiveNightmare, SeriousSAM)

Microsoft Windows is prone to an elevation of privilege vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Last Week’s Security news: Serious Sam in Metasploit, PetitPotam, Zimbra Hijack, Joint Advisory TOP30 CVEs

Hello everyone! Last Weeks Security News, July 26 - August 1. Serious Sam in Metasploit Last week I talked about the Serious Sam vulnerability CVE-2021-36934, also known as HiveNightmare. The name HiveNightmare comes from the fact that Windows stores its registry data in a small number of...

HiveNightmare zero-day lets anyone be SYSTEM on Windows 10 and 11

Users with low privileges can access sensitive Registry database files on Windows 10 and Windows 11, leaving them vulnerable to a local elevation of privilege vulnerability known as SeriousSAM or HiveNightmare. Doesnt sound serious? Reassured that users must already have access to the system and ...