12 matches found
CVE-2021-36934
CVE-2021-36934 HiveNightmare 又名 SeriousSAM...
oxide_hive
Oxide Hive 一个针对 HiveNightmare/SeriousSAM 漏洞的利用工具，它允许你在没有管理员权限的情况下读取包含敏感数据的注册表配置单元。如果这听起来都不像权限提升，那我就不知道什么才算了。 使用方法 使用 cargo build 构建漏洞利用程序并获取二进制文件后，将其部署到你的测试环境中，打开 CMD 并执行 .\oxidehive max shadow copies，卷影副本的默认值为 15。SAM、SECURITY 和 SYSTEM 配置单元应被转储到工作目录中。 从那时起，你可以使用这个脚本，配合命令 secretsdump.py -sam...
CVE-2021-36934
CVE-2021-36934 CVE-2021-36934 的 C 实现（也被称为 HiveNightmare/SeriousSAM），包含内置解析器。...
SeriousSam
SeriousSam HiveNightmare 又名 SeriousSam - Windows 本地权限提升 – CVE-2021-36934...
SeriousSam
Windows 权限提升漏洞 CVE-2021-36934 SeriousSAM 说明请参见微软文章： https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 通过 GPO 部署临时解决方案 将以下命令复制粘贴到记事本中，保存为批处理文件（.bat 扩展名），然后通过 GPO 推送到 Windows 机器上。 @echo off icacls %windir%\system32\config. /inheritance:e vssadmin delete shadows /all /quiet...
CVE-2021-36934
CVE-2021-36934 SeriousSAM自动利用工具 要求 HiveNightmare，可执行文件或等效的DLL（DLL等效需要通过rundll32运行，需要对代码进行一些修改，这在遇到applocker环境时很有用。） dump.exe m，这是一个由pyinstaller编译的secretsdump.py，因此体积很大，因为它包含了所有模块和Python本身。（你不需要将其作为DLL的原因是你也可以选择在服务器端调用它以及hashcat API，这实际上会更有效且更隐蔽。） hashcat API，这是我制作的一个PHP...
Microsoft Windows Elevation of Privilege Vulnerability (HiveNightmare, SeriousSAM)
Microsoft Windows is prone to an elevation of privilege vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Last Week’s Security news: Pegasus, SeriousSAM, Sequoia
Hello everyone! After 4 episodes of the Last Weeks Security news, I decided to change the format. I will no longer try to cover all the important news, because it takes a long time to prepare such reviews. So, from now on, I will focus only on a few news of the past week, which I subjectively...
How to Mitigate Microsoft Windows 10, 11 SeriousSAM Vulnerability
Microsoft Windows 10 and Windows 11 users are at risk of a new unpatched vulnerability that was recently disclosed publicly. As we reported last week, the vulnerability — SeriousSAM — allows attackers with low-level permissions to access Windows system files to perform a Pass-the-Hash and...
Microsoft Issues Windows 10 Workaround Fix for ‘SeriousSAM’ Bug
A privilege escalation bug, affecting versions of Windows 10, received a workaround fix by Microsoft Wednesday to prevent attackers from accessing data and creating new accounts on compromised systems. The bug, dubbed SeriousSAM, affects the Security Accounts Manager SAM database in all versions ...
HiveNightmare zero-day lets anyone be SYSTEM on Windows 10 and 11
Users with low privileges can access sensitive Registry database files on Windows 10 and Windows 11, leaving them vulnerable to a local elevation of privilege vulnerability known as SeriousSAM or HiveNightmare. Doesnt sound serious? Reassured that users must already have access to the system and ...
