714 matches found
CVE-2025-10230
CVE-2025-10230: Samba Critical RCE CVSS 10.0 Vulnerability Summary CVE-2025-10230 is a critical remote code execution RCE vulnerability that remained hidden in the Samba codebase for 13 years. The flaw resides in the handling of WINS Windows Internet Name Service registration packets. When...
cve-2020-1472
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...
POC-CVE-2026-54121-Certighost
CertiGhost CVE-2026-54121 - AD CS Chase Fallback Exploit Toolkit Overview CertiGhost is a critical vulnerability CVSS 8.8 in Active Directory Certificate Services AD CS that allows a low-privileged domain user to impersonate a Domain Controller and achieve full domain compromise. CVE:...
Invoke-DCSync
Invoke-DCSync Invoke-DCSync Reference: https://adsecurity.org/?p=1729 Reference: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ Goal: retrieve password hashes from all user accounts on a domain controller using the mimikatz DCSync function Warning：Only do this in a lab...
CVE-2020-1472-ZeroLogon-Demo-Detection-Mitigation
CVE-2020-1472 ZeroLogon Detection and Mitigation Demo This project demonstrates the detection and mitigation of the critical Windows vulnerability CVE-2020-1472, also known as ZeroLogon. The vulnerability allows attackers to gain unauthenticated administrative access. This was developed as part o...
NoPacScan
NoPacScan NoPacScan 是一个 CVE-2021-42287/CVE-2021-42278 扫描器，它能比原始脚本扫描到更多的域控制器，并且更加精确。它通过 DNS 查询 msdcs.aaa.com 来扫描 DC，这比 LDAP 和 SAMR 更好，并且它会自动扫描我们找到的所有 DC。如果你使用 LDAP 或 SAMR，可能会漏掉一些已从主 DC 中移除的 DC。为了更加精确，它会扫描 PAC 中类型等于 0x10 的部分，这是微软针对此漏洞的主要补丁位置。...
CVE-2025-33073
CVE-2025-33073 针对 NTLM 反射 SMB 漏洞的 PoC 利用程序。 所有功劳归功于官方研究： https://www.synacktiv.com/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 前提条件 操作系统：Kali Linux（已预装大部分软件包）。 NetExec NXC - https://github.com/Pennyw0rth/NetExec impacket-ntlmrelayx...
Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks.
Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks. Simulation of the Zerologon CVE-2020-1472 vulnerability attack in Active Directory on Windows Server 2016 and the use of the Trend Micro Deep Security solution to prevent such attacks. The Zerologon vulnerability is a weakne...
Check-AAD-Connect-for-CVE-2021-36949-vulnerability
The script will check if your Azure AD Connect is running a version affected by the vulnerability described in CVE-2021-36949. Affected versions are 1.6.4.0 and 2.0.3.0. Run the script on the server that hosts the AAD Connect installation. The script also checks if the auto-upgrade feature is...
The_big_Zero
NOTICE: I have yet to build out this repo and it's respective scripts correctly and the usage of this "exploit kit" will require some changes to file paths and for you to have the correct version of imnpacket installed on your device. Please note non of the code in this repository is to be used f...
CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...
SecuraBV-CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...
CVE-2020-1472
CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...
zerologon
Zerologon test for SMB & RPC A python script based on SecuraBV script. Demonstrates that CVE-2020-1472 can be done via RPC/SMB, and not only over RPC/TCP. Additionaly, there is a random byte in the final client challange & client credential - to test against trivial IDS signatures. The RPC/SMB sc...
zerologon-lab
zerologon-lab Scripts for a lab environment demonstrating the Zerologon CVE-2020-1472 vulnerability. Usage zerologon.py root@kitploit: zerologon.py -h --reset --restore HEX dcname dcip Attempt to exploit the Zerologon vulnerability against a Domain Controller. Arguments: dcname: The NetBIOS name ...
CVE-2020-1472
CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...
CVE-2026-41089
CVE-2026-41089 root@kitploit: ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════...
CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...
CVE-2020-1472
CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...