CVE-2021-36934 PoC — Microsoft Windows 访问控制错误漏洞

Source

https://github.com/Preventions/CVE-2021-36934

Associated Vulnerability

Title:Microsoft Windows 访问控制错误漏洞 (CVE-2021-36934)
Description:Microsoft Windows是美国微软（Microsoft）公司的一种桌面操作系统。 Microsoft Windows 存在访问控制错误漏洞，该漏洞源于系统对多个系统文件的访问控制列表过于宽松，因此存在特权提升漏洞。成功利用此漏洞的攻击者可以使用SYSTEM权限运行任意代码。

Description

C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM

Readme

# CVE-2021-36934

C# implementation of [CVE-2021-36934](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934) also called HiveNightmare/SeriousSAM with built-in parser.

![](Images/poc.png)

File Snapshot


 [4.0K]  /data/pocs/e37ade763fe9989ed6088601523f60ddfb944a10
├── [2.5K]  CVE-2021-36934.csproj
├── [ 226]  CVE-2021-36934.csproj.user
├── [1.1K]  CVE-2021-36934.sln
├── [4.0K]  HiveParser
│   ├── [9.4K]  Crypto.cs
│   ├── [1.1K]  LsaSecret.cs
│   ├── [ 820]  NL_Record.cs
│   ├── [5.4K]  NodeKey.cs
│   ├── [ 17K]  Registry.cs
│   ├── [1.3K]  RegistryHive.cs
│   └── [1.4K]  ValueKey.cs
├── [4.0K]  Images
│   └── [153K]  poc.png
├── [5.8K]  Program.cs
├── [4.0K]  Properties
│   └── [1.3K]  AssemblyInfo.cs
└── [ 206]  README.md

3 directories, 14 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!