Post #3816890
2026-07-14 19:22 UTC
@Epic_Null@infosec.exchange @jerry@infosec.exchange @kallisti@infosec.exchange Blog post didn't help: https://blog.projectnightcrawler.dev/posts/2026-07-14-legacyhive-public-disclosure/
But my understanding is that there is a way to load and modify another user's registry hive. The PoC requires another user's creds but apparently it's doable without that.
Replies (1)
-
@kallisti@infosec.exchange 2026-07-14 19:43
@cR0w@infosec.exchange @Epic_Null@infosec.exchange @jerry@infosec.exchange It doesn't require the target/victim user's creds. Just any user's creds are fine At least that's what I get from currently sifting through the code, trying to make sense of it