hivenightmare aka serious sam research paper
Security Research

HiveNightmare aka Serious SAM [CVE 2021-36934]

This paper explains the vulnerability, HiveNightmare (CVE-2021-36934), also known as SeriousSAM, in Windows 10 version 1809 and later. It is a zero-day privilege escalation vulnerability, taking advantage of overly permissive Access Control Lists (ACLs). An attacker with the ability to execute code on a target host could exploit this vulnerability to elevate their privileges to SYSTEM.

Key Pointers:
  • Understanding the vulnerability in Windows 10.
  • Taking a look at the severity, risk and the scope of impact of this vulnerability.
  • Understanding how to mitigate the vulnerability using some available work arounds.
  • Understanding the attack scenario and setting up the lab for exploitation.
  • Exploiting the vulnerability and taking the SYSTEM access.

Brands that
trust our competence

Explore more
kfc logo
discover logo
adp logo
adbed bath beyond logo
expedia logo
chipotle logo
Mosaic Insurance logo
dell logo
fannie-mae logo
 maersk logo
 gsk logo
 wiz logo
 bt logo