CVE-2021-36934 PoC — Microsoft Windows 访问控制错误漏洞

Source

https://github.com/shaktavist/SeriousSam

Associated Vulnerability

Title:Microsoft Windows 访问控制错误漏洞 (CVE-2021-36934)
Description:Microsoft Windows是美国微软（Microsoft）公司的一种桌面操作系统。 Microsoft Windows 存在访问控制错误漏洞，该漏洞源于系统对多个系统文件的访问控制列表过于宽松，因此存在特权提升漏洞。成功利用此漏洞的攻击者可以使用SYSTEM权限运行任意代码。

Description

Windows Elevation of Privilege Vulnerability CVE-2021-36934

Readme

<p><strong>Windows Elevation of Privilege Vulnerability CVE-2021-36934&nbsp; &nbsp;#SeriousSAM</strong></p>
<p>Description see MS article:&nbsp;<a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934">https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934</a></p>
<p>&nbsp;</p>
<p><strong><u>To deploy the workaround via GPO</u></strong></p>
<p>Copy paste the below commands in notepad, save as a batch file (.bat extension) and then use to push on to windows machines via GPO.</p>
<p><strong><em>@echo off icacls %windir%\system32\config*.&nbsp;/inheritance:e</em></strong></p>
<p><strong><em>vssadmin delete shadows /all /quiet</em></strong><strong>*</strong></p>
<p>As always, I would advise to test this first prior to mass deployment.</p>

File Snapshot


 [4.0K]  /data/pocs/4c14b8c9585a4a4462d1e43195187c018e21f8ac
└── [ 780]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!