Zerologon_CVE-2020-1472

Zerologon CVE-2020-1472 Este script se creó para comprobar de forma masiva los controladores de dominio en busca de la vulnerabilidad Zerologon. Nota Las vulnerabilidades de Zerologon son peligrosas para el controlador de dominio; no uses el exploit en servidores de producción. Argumentos --ip...

adfly

adfly Active Directory查询工具，使用LDAP协议，帮助红队成员/渗透测试人员验证用户凭据，检索有关AD用户、AD组的信息。 AD fly是一款使用LDAP协议进行用户身份验证访问和信息查询的工具。由于AD fly使用LDAP进行连接，它只需要一个有效账户进行身份验证，无需是AD域的一部分即可使用AD fly。从攻击机出发，红队成员能够通过LDAP访问Active Directory并检索操作所需的信息。 版本1.0包含以下模块： 查询用户组成员资格 列出组成员 列出所有域控制器 root@kitploit: \// \ | |/ $ $ || + AD Fly +...

Set-ZerologonMitigation

Set-ZerologonMitigation Proteja sus controladores de dominio contra Zerologon CVE-2020-1472. Uso Después de instalar la actualización de seguridad de agosto de 2020 o una versión acumulativa posterior, simplemente ejecute el script en cada uno de sus controladores de dominio. root@kitploit:...

CVE-2021-1675-PrintNightmare-Analysis

Investigación de vulnerabilidades: Elevación local de privilegios y RCE a través de Windows Print Spooler PrintNightmare / CVE-2021-1675 El repositorio contiene un informe técnico detallado write-up y el análisis del concepto de explotación de una vulnerabilidad crítica en el servicio del...

zerologon

zerologon script zerologon para explotar CVE-2020-1472 CVSS 10/10 Código de explotación basado en https://www.secura.com/blog/zero-logon y https://github.com/SecuraBV/CVE-2020-1472. Investigación original y escáner por Secura, modificaciones por RiskSense Inc. https://github.com/risksense/zerolog...

zerologon

zerologon Check for events that indicate non compatible devices - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 In August Microsoft patched CVE-2020-1472. With that patch theres a waiting period until 9th of february 2021 where unsecure connections will be accepte...

Astra Linux – Vulnerability in Samba

A design flaw was identified in Samba’s DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers RODCs. This flaw allows RODCs and users with the GETCHANGES permission to access all attributes, including sensitive...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089-Netlogon-RCE Technical analysis and Proof-of-Co...

samba: Fix of CVE-2026-4408

CVE-2026-4408: Escape/mask client-controlled username before %u substitution in 'check password script' to prevent remote command execution; restrict samrValidatePassword to DCs...

Important: samba

Issue Overview: unauthenticated udp packet crashes AD DC nbt server CVE-2026-3238 Samba file servers and classic non-AD domain controllers offer the SamValidatePasswordChange and SamValidatePasswordReset RPC services on the SAMR DCE/RPC service when running over NCACNIPTCP. Both services pass a...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...