zerologon

CVE-2020-1472 aka Zerologon Exploit POC What is it? NetLogon MS-NRPC, can establish inter-domain control vulnerable security channel. It's possible to zero out the password for the machine account on domain controllers. Notes: DC will be semi broken while password is zero'ed out, however this...

SecuraBV-CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

zerologon

ZeroLogon exploitation script Exploit code based on https://www.secura.com/blog/zero-logon and https://github.com/SecuraBV/CVE-2020-1472. Original research and scanner by Secura, modifications by RiskSense Inc. To exploit, clear out any previous Impacket installs you have and install Impacket fro...

zerologon

Script de explotación de ZeroLogon Código de explotación basado en https://www.secura.com/blog/zero-logon y https://github.com/SecuraBV/CVE-2020-1472. Investigación y escáner originales por Secura, modificaciones por RiskSense Inc. Para explotar, elimina cualquier instalación previa de Impacket q...

ZeroLogon-to-Shell

This is a combination of the zerologontester.py code and the tool evil-winrm to get a shell. I just added a "os.system" to use evil-winrm. Requirements: To get the Administrator NTLM HASH I recommend you to use secretsdump tool from impacket And, of course, you need to install evil-winrm This is...

zerologon-cve-2020-1472-notes

This repository does not have a README...

CVE-2020-1472

CVE-2020-1472 Código de verificación y explotación para CVE-2020-1472, también conocido como Zerologon Comprueba si un controlador de dominio es vulnerable al ataque Zerologon. Si lo es, restablece la contraseña de la cuenta del controlador de dominio a una cadena vacía. NOTA: Es probable que est...

zerologon-poc

zerologon-poc A script to exploit CVE-2020-1472 Zerologon Not my research. I just wrote a PoC based on the brilliant work of other who discovered this vuln...

CVE-2020-1472

CVE-2020-1472 Netlogon 원격 프로토콜 호출MS-NRPC 권한 상승 Zerologon 여기에 설명된 공격은 도메인 가입 컴퓨터의 신뢰성과 신원을 도메인 컨트롤러DC에 증명하는 암호화 인증 프로토콜AES-CFB8의 안전하지 않은 사용의 결함을 이용합니다. AES 운영 모드의 잘못된 사용으로 인해 모든 컴퓨터 계정DC 자체 포함의 신원을 스푸핑하고 해당 도메인 계정에 빈 암호여러 필드가 0으로 채워진 여러 Netlogon 메시지를 보내는 것만으로를 설정할 수 있습니다. 이후 이를 사용하여 도메인 관리자 자격 증명을...

redteam-research

Red Team Research Collection of PoC and offensive techniques used by the BlackArrow Red Team License All the code included in this project is licensed under the terms of the MIT license...

Zerologon

Zerologon Exploit Code for CVE-2020-1472 aka Zerologon...

MassZeroLogon

Tool for mass testing ZeroLogon vulnerability CVE-2020-1472 Steps to procedure For using this tool you need a hosts file with the ip adress and hostname separated by comma Hosts file sample root@kitploit: 1.1.1.1 , WIN-6641554161U 1.1.1.1 , SERVERDATA 1.1.1.1 , SERVER2012 1.1.1.1 , DC01 1.1.1.1 ,...

CVE-2020-1472-LAB

ZeroLogon testing script A lab setup to test a vulnerability for the ZeroLogon exploit CVE-2020-1472. It contains a Python script that uses the Impacket library to test the vulnerability, and a Virtual Machine VM with Windows Server 2019 configured as a Domain Controller DC. The script attempts t...

ntlm-scanner

¡Nuevo! Escaneo de explotación para CVE-2020-1472 ZeroLogon Escanee los controladores de dominio DCs en su red para detectar la explotación real de CVE-2020-1472 Ejemplos: root@kitploit: python scan.py -vuln CVE-2020-1472 -target-file targets.txt python scan.py -vuln CVE-2020-1472 -target La...

zer0dump

Zer0Dump Zer0dump es un PoC de exploit/herramienta para abusar de las vulnerabilidades asociadas con CVE-2020-1472 Zerologon con el fin de iniciar una toma de control completa del sistema de un controlador de dominio de Windows sin parchear. Agradecimientos especiales a @dirkjanm y @SecureAuthCor...

zerologon-CVE-2020-1472

CVE-2020-1472 - Zero-Logon POC This exploit requires you to use the latest impacket from GitHub. Ensure impacket installation is done with netlogon structures added. Note : 1. By default, successful exploitation changes the password of the DC Account. 2. Allows DCSync 3. Breaks communication with...

PIGADVulnScanner

ADVulnScanner Detect common one-shot vulnerabilities in the domain, including: NoPac, ZeroLogon, CVE-2022-26923, PrintNightMare...

CVE-2020-1472-ZeroLogon-Demo-Detection-Mitigation

CVE-2020-1472 ZeroLogon 検出および緩和デモ このプロジェクトは、ZeroLogon としても知られる深刻なWindows脆弱性CVE-2020-1472の検出と緩和を示しています。この脆弱性により、攻撃者は認証なしで管理者アクセスを取得できます。これは学校のサイバーセキュリティプロジェクトの一環として開発されました。PoCコードのクレジットはTom Tervoort（Secura）に、SuricataルールセットのクレジットはProofpoint Emerging Threatsに帰属します。 主な構成要素:...

ZerologonWithImpacket-CVE2020-1472

Zerologon and Impacket Combination Exploit CVE-2020-1472 This repository contains an updated implementation 2024 of the Zerologon exploit combined with Impacket tools to exploit CVE-2020-1472 Zerologon. This exploit targets Windows Server environments to manipulate machine account passwords and...

ZeroLogon-Exploitation-Check

Script to automate Checks for potential exploitation of CVE-2020-1472 aka ZeroLogon in the domain. This is a very "quick and dirty" script that automates some of the leading artifects in determining an actual exploitation of CVE-2020-1472, compiled from multiple blogs. Ideally, the 2nd check for...