Zerologon_CVE-2020-1472

Zerologon CVE-2020-1472 这个脚本用于批量检查你的域控制器是否存在Zerologon漏洞。 注意 Zerologon漏洞对域控制器非常危险，请勿在生产服务器上使用此漏洞利用程序。 参数 --ip 用于检查CVE-2020-1472的IP地址 --file 包含IP地址的文件路径 --threads 线程数 --name NetBIOS计算机名，与--ip标志一起使用 示例 python3 checkcve-2020-1472.py ---ip python3 checkcve-2020-1472.py ---ip ---name python3...

adfly

adfly active directory query tool using LDAP Protocol , helps red teamer / penetration testers to validate users credentials , retrieve information about AD users , AD groups AD fly is Tool uses LDAP Protocol for users authentication access and queries of information ,since AD fly uses LDAP for...

Set-ZerologonMitigation

Set-ZerologonMitigation 保护域控制器免受 Zerologon CVE-2020-1472 攻击。 使用 安装 2020 年 8 月安全更新（或更新的累积版本）后，只需在每个域控制器上运行此脚本即可。 root@kitploit: .\Set-ZerologonMitigation.ps1 如需帮助，请运行 Get-Help： root@kitploit: Get-Help .\Set-ZerologonMitigation.ps1 显而易见，此脚本仅支持 Microsoft Windows。...

CVE-2021-1675-PrintNightmare-Analysis

Investigación de vulnerabilidades: Elevación local de privilegios y RCE a través de Windows Print Spooler PrintNightmare / CVE-2021-1675 El repositorio contiene un informe técnico detallado write-up y el análisis del concepto de explotación de una vulnerabilidad crítica en el servicio del...

zerologon

zerologon zerologon 脚本，用于利用 CVE-2020-1472，CVSS 评分 10/10 漏洞利用代码基于 https://www.secura.com/blog/zero-logon 和 https://github.com/SecuraBV/CVE-2020-1472。原始研究和扫描工具由 Secura 提供，修改工作由 RiskSense Inc. 完成。 https://github.com/risksense/zerologon 要利用该漏洞，请先清除之前安装的任何 Impacket，并从...

zerologon

zerologon 检查指示不兼容设备的事件 - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 八月，微软修补了 CVE-2020-1472。该补丁设有一个过渡期，直至 2021 年 2 月 9 日，在此期间不安全的连接仍会被接受。 到 2 月 9 日应用补丁后，不安全的客户端将被拒绝。...

Astra Linux – Vulnerability in Samba

A design flaw was identified in Samba’s DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers RODCs. This flaw allows RODCs and users with the GETCHANGES permission to access all attributes, including sensitive...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089-Netlogon-RCE Technical analysis and Proof-of-Co...

samba: Fix of CVE-2026-4408

CVE-2026-4408: Escape/mask client-controlled username before %u substitution in 'check password script' to prevent remote command execution; restrict samrValidatePassword to DCs...

Important: samba

Issue Overview: unauthenticated udp packet crashes AD DC nbt server CVE-2026-3238 Samba file servers and classic non-AD domain controllers offer the SamValidatePasswordChange and SamValidatePasswordReset RPC services on the SAMR DCE/RPC service when running over NCACNIPTCP. Both services pass a...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...