ZeroLogon-Exploit

ZeroLogon - Exploit et Exemple Modifié le PoC de test de Secura, CVE-2020-1472, afin de modifier le mot de passe de la machine pour le mettre à null. Le changement de mot de passe sur la machine utilise la fonction NetrServerPasswordSet2 de Microsoft. Cet exploit tire parti du module nrpc.py...

zerologon-lab

zerologon-lab Scripts pour un environnement de laboratoire démontrant la vulnérabilité Zerologon CVE-2020-1472. Utilisation zerologon.py zerologon.py -h --reset --restore HEX dcname dcip Tente d'exploiter la vulnérabilité Zerologon contre un contrôleur de domaine. Arguments : dcname: Le nom NetBI...

CVE-2026-9864 Fortra BoKS Server Agent adjoin machine-account password generation vulnerability

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...

CVE-2026-9864 Fortra BoKS Server Agent adjoin machine-account password generation vulnerability

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...

Machine Account Password Fails to Update

While configuring Active Directory machine account password management in the virtual disk file properties, the machine account password expires after the determined value timeout without successfully changing...

PT-2023-7018 · Univention · Univention Corporate Server

Name of the Vulnerable Software and Affected Versions: Univention Corporate Server UCS versions 5.0-5 Description: The issue is related to the check univention joinstatus prometheus monitoring script, which reveals the LDAP plaintext password of the machine account in the process list. This allow...

SUSE CVE-2006-1059

The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain...

Event Viewer on the PVS Target Devices Shows: "Unable to update database with new machine account - The operation completed successfully. (0x0)"

Error shown in the Event Viewer on all the PVS Target Devices: Source: BNDevice EventID: 1014 Unable to update database with new machine account password - The operation completed successfully. 0x0. All PVS Target Devices are getting the same error every one hour after the first automatic attempt...

Disabling automatic password change for nonpersistent desktops

Computers use their machine account password for authentication with Active Directory. By default, computers are configured to change their machine account passwords every 30 days. This setting affects nonpersistent desktops in the following ways: 1. When you deploy the nonpersistent desktop, the...

NorkNork - Powershell Empire Persistence Finder

This script was designed to identify Powershell Empire persistence payloads on Windows systems. It currently supports checks for these persistence methods: Scheduled Tasks Auto-run WMI subscriptions Security Support provider Ease of Access Center backdoors Machine account password disable INSTALL...