post/windows/gather/credentials/windows_sam_hivenightmare

functional

Windows SAM secrets leak - HiveNightmare

view exploit source metasploittype postpublished 2021-07-20catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-36934US	medium4.6OT critical	67.3% (99th)	KEV	2021-07-22
An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) data…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.