CVE-2020-1472-EXP

Ladon Moudle CVE-2020-1472 Exploit Uso: http://k8gege.org/Ladon/cve-2020-1472.html...

SecuraBV-CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

CVE-2020-1472

CVE-2020-1472 CVE 2020-1472 Script de validación Assumption: WinRM is enabled between domain controllers. Required permissions: root@kitploit: If child domains are present: Enterprise admin If single forest, single domain: Domain admin This script must be run on a primary domain controller with...

CVE-2020-1472

Script de prueba de ZeroLogon Un script Python que utiliza la librería Impacket para probar la vulnerabilidad del exploit Zerologon CVE-2020-1472. Intenta realizar la omisión de autenticación de Netlogon. El script finalizará inmediatamente cuando realice con éxito la omisión, y no realizará...

ZerologonWithImpacket-CVE2020-1472

Zerologon and Impacket Combination Exploit CVE-2020-1472 This repository contains an updated implementation 2024 of the Zerologon exploit combined with Impacket tools to exploit CVE-2020-1472 Zerologon. This exploit targets Windows Server environments to manipulate machine account passwords and...

ZeroLogon-Exploit

ZeroLogon - Exploit and Example Modified the test PoC from Secura, CVE-2020-1472, in order to change the machine's password to null. Changing the password on the machine uses Microsoft's NetrServerPasswordSet2 function. This exploit takes advantage of Impacket's nrpc.py module to call...

zerologon

Script de explotación de ZeroLogon Código de explotación basado en https://www.secura.com/blog/zero-logon y https://github.com/SecuraBV/CVE-2020-1472. Investigación y escáner originales por Secura, modificaciones por RiskSense Inc. Para explotar, elimina cualquier instalación previa de Impacket q...

MassZeroLogon

Tool for mass testing ZeroLogon vulnerability CVE-2020-1472 Steps to procedure For using this tool you need a hosts file with the ip adress and hostname separated by comma Hosts file sample root@kitploit: 1.1.1.1 , WIN-6641554161U 1.1.1.1 , SERVERDATA 1.1.1.1 , SERVER2012 1.1.1.1 , DC01 1.1.1.1 ,...

CVE-2020-1472

CVE-2020-1472...

ZeroLogon-Exploitation-Check

Script to automate Checks for potential exploitation of CVE-2020-1472 aka ZeroLogon in the domain. This is a very "quick and dirty" script that automates some of the leading artifects in determining an actual exploitation of CVE-2020-1472, compiled from multiple blogs. Ideally, the 2nd check for...

zerologon

CVE-2020-1472 aka Zerologon Exploit POC What is it? NetLogon MS-NRPC, can establish inter-domain control vulnerable security channel. It's possible to zero out the password for the machine account on domain controllers. Notes: DC will be semi broken while password is zero'ed out, however this...

CVE-2020-1472-ZeroLogon-Demo-Detection-Mitigation

CVE-2020-1472 ZeroLogon Detection and Mitigation Demo This project demonstrates the detection and mitigation of the critical Windows vulnerability CVE-2020-1472, also known as ZeroLogon. The vulnerability allows attackers to gain unauthenticated administrative access. This was developed as part o...

CVE-2020-1472

CVE-2020-1472 CVE-2020-1472 exploit来源: https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472...

CVE-2020-1472

CVE-2020-1472 arp-scan Rangip nmap -A -vv -Pn IPADDR python3 setemptypw.py DCNETBIOSNAME DCIPADDR python3 secretsdump.py -no-pass -just-dc DOMAIN/DCNETBIOSNAME$@DCIPADDR python3 wmiexec.py -hashes HassPasswdUser DOMAIN/User@dcipaddr windows command whoami systeminfo hostname md testdir echo test...

Zerologon

Zerologon Exploit Code for CVE-2020-1472 aka Zerologon...

ZeroLogon-to-Shell

This is a combination of the zerologontester.py code and the tool evil-winrm to get a shell. I just added a "os.system" to use evil-winrm. Requirements: To get the Administrator NTLM HASH I recommend you to use secretsdump tool from impacket And, of course, you need to install evil-winrm This is...

zerologon-poc

zerologon-poc A script to exploit CVE-2020-1472 Zerologon Not my research. I just wrote a PoC based on the brilliant work of other who discovered this vuln...

The_big_Zero

NOTICE: I have yet to build out this repo and it's respective scripts correctly and the usage of this "exploit kit" will require some changes to file paths and for you to have the correct version of imnpacket installed on your device. Please note non of the code in this repository is to be used f...

CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...

CVE-2020-1472

CVE-2020-1472 CVE-2020-1472...