714 matches found
CVE-2020-1472
CVE-2020-1472 Empaquetado de archivos .py utilizados en la reproducción de CVE-2020-1472 La ruta examples es el directorio donde se encuentran los archivos exp, los demás son paquetes de importación, ignórelos. Artículo de blog correspondiente:...
CVE-2020-1472
Windows NetLogon Privilege Escalation Vulnerability Reproduction CVE-2020-1472 You need to extract impacket.zip to the current folder The latest impacket package can be downloaded here: https://github.com/SecureAuthCorp/impacket For the specific process, please refer to the article:...
CVE-2020-1472-ZeroLogon-Demo-Detection-Mitigation
CVE-2020-1472 ZeroLogon Detection and Mitigation Demo This project demonstrates the detection and mitigation of the critical Windows vulnerability CVE-2020-1472, also known as ZeroLogon. The vulnerability allows attackers to gain unauthenticated administrative access. This was developed as part o...
CVE-2024-49113-Checker
CVE-2024-49113-Checker Script to test whether your environment is potentially vulnerable to CVE-2024-49113 LDAP Nightmare. This script performs: RPC connectivity checks LDAP port tests Netlogon service validation LDAP callback verification usage : python CVE-2024-49113-checker.py Example Scan a...
CVE-2024-49112
LDAP Nightmare An exploit for CVE-2024-49112 reported by Yuki Chen @guhe120. A vulnerability in Windows Lightweight Directory Access Protocol LDAP. Created by SafeBreach Labs published on January 1st 2025. For the full technical analysis of the vulnerability and how we managed to exploit it check...
CVE-2026-41089
CVE-2026-41089 ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════╝ ╚═══╝ ╚══════...
zerologon
Zerologon Summary A Zeek detection package for CVE-2020-1472, also known as Zerologon, which is a CVSS 10.0 privilege escalation vulnerability against the Netlogon protocol for Windows Server domain controllers. Notices By default, both notices are raised: ZerologonAttempt indicates the requisite...
CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...
SecuraBV-CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...
CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...
CVE-2026-41089-Detector
Herramienta de detección CVE-2026-41089 Este es un script de detección CVE-2026-41089 para inspecciones de defensa. Esta vulnerabilidad es una vulnerabilidad de ejecución remota de código en Windows Netlogon revelada por Microsoft en la actualización de seguridad de mayo de 2026. El script no env...
Rocky Linux 9 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2023_2127)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20232127 advisory. samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided CVE-2022-38023 Tenable has extracted the preceding description block directly from the CIQ...
Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2023_0838)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230838 advisory. samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided CVE-2022-38023 Tenable has extracted the preceding description block directly from the CIQ...
Exploit for Stack-based Buffer Overflow in Microsoft
🛡️ CVE-2026-41089-Netlogon-RCE-PoC - Validate Security Vulnera...
The vulnerability of the Netlogon service in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Netlogon service in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Astra Linux – Vulnerability in Samba
Netlogon RPC Elevation of Privilege Vulnerability...
Exploit for Stack-based Buffer Overflow in Microsoft
🛡️ AI Security Tool Module CVE-2026-4...
CVE-2026-72982
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network...
