HuskyHacks/ShadowSteal

PoC

Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM local privilege escalation

view exploit source poc_in_githubauthor HuskyHackspublished 2021-07-20catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-36934US	medium4.6OT critical	67.3% (99th)	KEV	2021-07-22
An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) data…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.