SecuraBV-CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

bloodyAD

⚠️ autobloody se ha movido a su propio repositorio bloodyAD bloodyAD es una navaja suiza de escalada de privilegios de Active Directory Descripción Esta herramienta puede realizar llamadas LDAP específicas a un controlador de dominio para llevar a cabo la privesc de AD. bloodyAD admite...

imposter

IMPOSTER Una herramienta de pentest utilizada para atacar clientes Windows en redes maliciosas. Versión actual Características Degradar la autenticación LDAP a NTLM Falsificar los pasos iniciales de un controlador de dominio para engañar a Network Location Awareness Servidores DNS, CLDAP, LDAP...

zerologon

Zerologon Set of scripts, to test and exploit the zerologon vulnerability CVE-2020-1472 What is it? ZeroLogon is a vulnerability that allows us to exploit a cryptography flaw in Microsoft's Active Directory Netlogon Remote Protocol MS-NRPC, which allows users to log in to servers using NTLM...

CVE-2020-0665

CVE-2020-0665 - Bypass de Filtro SID Prueba de Concepto para CVE-2020-0665, que permite eludir el Filtrado SID en Bosques de Active Directory Ataque entre Bosques. Requisitos para el ataque La máquina Controladora de Dominio objetivo no debe tener parches posteriores a febrero de 2020. Haber...

CVE-2020-1472

CVE-2020-1472 POC Requiere la última versión de impacket desde GitHub con las estructuras netlogon añadidas. Ten en cuenta que, por defecto, esto cambia la contraseña de la cuenta del controlador de dominio. Sí, esto te permite hacer DCSync, pero también rompe la comunicación con otros...

CVE-2025-33073

CVE-2025-33073 Reflection Relay PoC Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled. 📋 Overview CVE-2025-33073 is a critical vulnerability that allows attackers to achieve SYSTEM-level code execution on Windows Domain...

CVE-2020-1472

CVE-2020-1472 POC Requiere la última versión de impacket desde GitHub con estructuras netlogon añadidas. Tenga en cuenta que por defecto esto cambia la contraseña de la cuenta del controlador de dominio. Sí, esto le permite realizar DCSync, pero también rompe la comunicación con otros controlador...

cve-2021-1675

〖EXP〗Ladon Printer Vulnerability Privilege Escalation CVE-2021-1675 Reproduction http://k8gege.org/p/CVE-2021-1675.html Overview On June 9, Microsoft released the June security update patch, fixing 50 security vulnerabilities, including a Windows Print Spooler privilege escalation vulnerability,...

noPac

noPac CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter. Yet another low effort domain user to domain admin exploit. If a Domain Controller is vulnerable it will return a TGT without a PAC, all eyes on small size tickets. Mitigation Patch your Domain Controllers! Credits Charlie Clark for his...

ADLab

Laboratorio de Pruebas de Penetración de AD Autor: @browninfosecguy Versión: 1.0 Uso: Este script se puede usar para configurar tanto el Domain Controller como la Workstation. OPCIONES APLICABLES AL SERVIDOR: Opción 1: Configurar el nombre de la máquina y la dirección IP estática para el Domain...

zerologon

CVE-2020-1472 aka Zerologon Exploit POC What is it? NetLogon MS-NRPC, can establish inter-domain control vulnerable security channel. It's possible to zero out the password for the machine account on domain controllers. Notes: DC will be semi broken while password is zero'ed out, however this...

kerberoast

🚩 Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors kerberoast Kerberos attack toolkit -pure python- Install pip3 install kerberoast Prereqirements Python 3.6 See requirements.txt For the impatient IMPORTANT: the accepted target url formats for LDAP and Kerberos are th...

CVE-2020-1472-Easy

CVE-2020-1472-Easy This is definitely not something you would want to run on anything that you care about. Built from a writeup and work from @obfuscatee and another source Uses code from https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472...

NewMachineAccount

NewMachineAccount Overview NewMachineAccount.exe is a simple standalone exe tool for creating new machine accounts with custom password within a specified domain. Usage root@kitploit: NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain -password -ou -user -pass -uac Parameters -dc :...

CVE-2022-30216

CVE-2022-30216 A Zeek package which raises notices for attempts and exploits of CVE-2022-30216, a technique used against Windows Server to force an NTLM authorization to an arbitrary server. An attacker can reuse the NTLM token to generate a client certificate, enabling them to request a Kerberos...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

zerologon

Script de explotación de ZeroLogon Código de explotación basado en https://www.secura.com/blog/zero-logon y https://github.com/SecuraBV/CVE-2020-1472. Investigación y escáner originales por Secura, modificaciones por RiskSense Inc. Para explotar, elimina cualquier instalación previa de Impacket q...

CVE-2026-41089

CVE-2026-41089 — Exploit de Desbordamiento de Búfer en la Pila de Windows Netlogon CLDAP RCE CVE-ID: CVE-2026-41089 CVSS: 9.8 Crítico CWE: CWE-121 Desbordamiento de Búfer basado en la Pila Vector de ataque: UDP/389 CLDAP SearchRequest Impacto: Ejecución remota de código RCE / Denegación de servic...