POC-CVE-2026-54121-Certighost

CertiGhost CVE-2026-54121 - Kit de Exploração do Fallback Chase do AD CS Visão Geral O CertiGhost é uma vulnerabilidade crítica CVSS 8.8 nos Serviços de Certificados do Active Directory AD CS que permite que um usuário de domínio com privilégios baixos se faça passar por um Controlador de Domínio...

The Fake Domain Controller You Didn’t See Coming: Detecting DCShadow Attacks Using Trellix NDR

The Fake Domain Controller You Didn’t See Coming: Detecting DCShadow Attacks Using Trellix NDR By Maulik Maheta and Chao Sun · December 17, 2025 Executive summary DCShadow is a covert post-exploitation technique that enables an attacker to impersonate a domain controller and make unauthorized,...

samba: Netlogon elevation of privilege vulnerability (Zerologon)

A flaw was found in the Microsoft Windows Netlogon Remote Protocol MS-NRPC, where it reuses a known, static, zero-value initialization vector IV in AES-CFB8 mode. This flaw allows an unauthenticated attacker to impersonate a domain-joined computer, including a domain controller, and possibly obta...