SharpSecDump
SharpSecDump copied to clipboard
Move temp storage of reg hives to %TEMP%
Storing the SAM and SECURITY hive in a folder where local unprivileged users can read them results in a privilege escalation vulnerability.
https://disobey.fi/2023/profile/finding_vulnerabilities_in_offensive