11 matches found
SeriousSam
SeriousSam HiveNightmare（別名 SeriousSam）による Windows のローカル権限昇格 – CVE-2021-36934...
CVE-2021-36934
CVE-2021-36934 HiveNightmare（別名 SeriousSAM）...
oxide_hive
Oxide Hive HiveNightmare/SeriousSAM 脆弱性を利用したエクスプロイトで、管理者権限なしで機密データを含むレジストリハイブを読み取ることができます。これが権限昇格に聞こえないなら、何が権限昇格なのかわかりません。 使い方 cargo build でエクスプロイトをビルドしてバイナリを取得した後、テスト環境にデプロイし、CMD を開いて .\oxidehive 最大シャドウコピー数 を実行します。シャドウコピーのデフォルトは15です。SAM、SECURITY、SYSTEM の各ハイブが作業ディレクトリにダンプされます。 その後、このスクリプト を...
CVE-2021-36934
CVE-2021-36934 SeriousSAM自动利用工具 要求 HiveNightmare，可执行文件或等效的DLL（DLL等效需要通过rundll32运行，需要对代码进行一些修改，这在遇到applocker环境时很有用。） dump.exe m，这是一个由pyinstaller编译的secretsdump.py，因此体积很大，因为它包含了所有模块和Python本身。（你不需要将其作为DLL的原因是你也可以选择在服务器端调用它以及hashcat API，这实际上会更有效且更隐蔽。） hashcat API，这是我制作的一个PHP...
CVE-2021-36934
CVE-2021-36934 CVE-2021-36934 的 C 实现（也被称为 HiveNightmare/SeriousSAM），包含内置解析器。...
Microsoft Windows Elevation of Privilege Vulnerability (HiveNightmare, SeriousSAM)
Microsoft Windows is prone to an elevation of privilege vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Last Week’s Security news: Pegasus, SeriousSAM, Sequoia
Hello everyone! After 4 episodes of the Last Weeks Security news, I decided to change the format. I will no longer try to cover all the important news, because it takes a long time to prepare such reviews. So, from now on, I will focus only on a few news of the past week, which I subjectively...
How to Mitigate Microsoft Windows 10, 11 SeriousSAM Vulnerability
Microsoft Windows 10 and Windows 11 users are at risk of a new unpatched vulnerability that was recently disclosed publicly. As we reported last week, the vulnerability — SeriousSAM — allows attackers with low-level permissions to access Windows system files to perform a Pass-the-Hash and...
Microsoft Issues Windows 10 Workaround Fix for ‘SeriousSAM’ Bug
A privilege escalation bug, affecting versions of Windows 10, received a workaround fix by Microsoft Wednesday to prevent attackers from accessing data and creating new accounts on compromised systems. The bug, dubbed SeriousSAM, affects the Security Accounts Manager SAM database in all versions ...
HiveNightmare zero-day lets anyone be SYSTEM on Windows 10 and 11
Users with low privileges can access sensitive Registry database files on Windows 10 and Windows 11, leaving them vulnerable to a local elevation of privilege vulnerability known as SeriousSAM or HiveNightmare. Doesnt sound serious? Reassured that users must already have access to the system and ...
