13 matches found
zerologon
ZeroLogon エクスプロイトスクリプト エクスプロイトコードは https://www.secura.com/blog/zero-logon および https://github.com/SecuraBV/CVE-2020-1472 に基づいています。元の研究とスキャナーは Secura によるもので、RiskSense Inc. が修正を加えています。 エクスプロイトするには、既存の Impacket インストールをすべて削除し、https://github.com/SecureAuthCorp/impacket/commit/b867b21 以降の Impacket...
zerologon
zerologon zerologon 脚本，用于利用 CVE-2020-1472，CVSS 评分 10/10 漏洞利用代码基于 https://www.secura.com/blog/zero-logon 和 https://github.com/SecuraBV/CVE-2020-1472。原始研究和扫描工具由 Secura 提供，修改工作由 RiskSense Inc. 完成。 https://github.com/risksense/zerologon 要利用该漏洞，请先清除之前安装的任何 Impacket，并从...
Netlogon Weak Cryptographic Authentication
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'windowserror' class MetasploitModule 'Netlogon Weak Cryptographic Authentication', 'Description' = %q A vulnerability exists within the Netlogon authentication...
ZeroLogon - Netlogon Elevation of Privilege
Exploit Title: ZeroLogon - Netlogon Elevation of Privilege Date: 2020-10-04 Exploit Author: West Shepherd Vendor Homepage: https://www.microsoft.com Version: Microsoft Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 Tested on: Microsof...
Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange
I would like to start this post by talking about Microsoft vulnerabilities, which recently turned out to be much more serious than it seemed at first glance. Older Vulnerabilities with exploits "Zerologon" Netlogon RCE CVE-2020-1472 One of them is, of course, the Netlogon vulnerability from the...
Exploit for CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impack...
Detecting and Preventing Critical ZeroLogon Windows Server Vulnerability
If you're administrating Windows Server, make sure it's up to date with all recent patches issued by Microsoft, especially the one that fixes a recently patched critical vulnerability that could allow unauthenticated attackers to compromise the domain controller. Dubbed 'Zerologon' CVE-2020-1472...
DHS Issues Dire Patch Warning for ‘Zerologon’
Federal agencies that haven’t patched their Windows Servers against the ‘Zerologon’ vulnerability by Monday Sept. 21 at 11:59 pm EDT are in violation of a rare emergency directive issued by the Secretary of Homeland Security. With only hours until the deadline for the directive, issued on Friday,...
Exploit for CVE-2020-1472
CVE-2020-1472 POC Requires the latest impacket from GitHubh...
Exploit for CVE-2020-1472
!Pythonpython-shield CVE-2020-1472 CVE-2020-1472 - Zero...
Exploit for CVE-2020-1472
CVE-2020-1472 POC Requires the latest impacket from GitHubh...
Windows Exploit Released For Microsoft ‘Zerologon’ Flaw
Proof-of-concept PoC exploit code has been released for a Windows flaw, which could allow attackers to infiltrate enterprises by gaining administrative privileges, giving them access to companies’ Active Directory domain controllers DCs. The vulnerability, dubbed “Zerologon,” is a...