zer0dump

Zer0Dump Zer0dump es un PoC de exploit/herramienta para abusar de las vulnerabilidades asociadas con CVE-2020-1472 Zerologon con el fin de iniciar una toma de control completa del sistema de un controlador de dominio de Windows sin parchear. Agradecimientos especiales a @dirkjanm y @SecureAuthCor...

CVE-2020-1472

CVE-2020-1472 Código de verificación y explotación para CVE-2020-1472, también conocido como Zerologon Comprueba si un controlador de dominio es vulnerable al ataque Zerologon. Si lo es, restablece la contraseña de la cuenta del controlador de dominio a una cadena vacía. NOTA: Es probable que est...

CVE-2026-41089-Netlogon-RCE

🚨 CVE-2026-41089: Critical Windows Netlogon RCE Unauthenticated Remote Code Execution on Active Directory Domain Controllers 🧠 Conceptual Overview I am publishing this technical breakdown of CVE-2026-41089 , an exceptionally critical vulnerability residing deep within the Windows Netlogon service...

noPac

noPac CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter. Yet another low effort domain user to domain admin exploit. If a Domain Controller is vulnerable it will return a TGT without a PAC, all eyes on small size tickets. Mitigation Patch your Domain Controllers! Credits Charlie Clark for his...

CVE-2020-0665

CVE-2020-0665 - SID Filter Bypass Proof of Concept for CVE-2020-0665, which allows bypassing SID Filtering in Active Directory Forests Cross Forest Attack. Requirements for the attack Target Domain Controller machine must not be patched after February, 2020. Having previously compromised a Domain...

ntlm-scanner

¡Nuevo! Escaneo de explotación para CVE-2020-1472 ZeroLogon Escanee los controladores de dominio DCs en su red para detectar la explotación real de CVE-2020-1472 Ejemplos: root@kitploit: python scan.py -vuln CVE-2020-1472 -target-file targets.txt python scan.py -vuln CVE-2020-1472 -target La...

CVE-2026-54121

👻 CVE-2026-54121 — CertiGhost Active Directory Certificate Services AD CS Privilege Escalation 👋 Overview CVE-2026-54121 "Certighost" is a high-severity privilege escalation vulnerability affecting Microsoft Active Directory Certificate Services AD CS. The vulnerability allows an authenticated...

CVE-2020-1472-LAB

ZeroLogon testing script A lab setup to test a vulnerability for the ZeroLogon exploit CVE-2020-1472. It contains a Python script that uses the Impacket library to test the vulnerability, and a Virtual Machine VM with Windows Server 2019 configured as a Domain Controller DC. The script attempts t...

CVE-2021-1675

De Lares Labs: Información de Detección y Corrección para CVE-2021-1675 y CVE-2021-34527 🚨 Parche publicado: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Se ha confirmado que el parche corrige RCE, sin embargo la escalada de privilegios local parece no estar parcheada aún...

CVE-2026-41089

CVE-2026-41089 — Windows Netlogon CLDAP Stack Buffer Overflow RCE Exploit CVE-ID: CVE-2026-41089 CVSS: 9.8 Critical CWE: CWE-121 Stack-based Buffer Overflow Attack Vector: UDP/389 CLDAP SearchRequest Impact: Remote Code Execution RCE / Denial of Service DoS Affected Versions: Windows Server 2012 ...

imposter

IMPOSTER A pentest tool used to attack windows clients on rogue networks. Current version Features Downgrade LDAP to NTLM authentication Fake initial steps of an domain controller to fool Network Location Awareness Servers DNS, CLDAP, LDAP Setup The current version have been tested on Kali Linux...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

DCSYNCMonitor

DCSYNCMonitor Description This tool is an application/service that can be deployed on Domain controllers to alert on Domain Controller Syncronization attempts. When an attempt is detected, the tool will write an event to the Windows Event Log. These events can be correlated in a SIEM. In addition...

zerologon

Zerologon Set of scripts, to test and exploit the zerologon vulnerability CVE-2020-1472 What is it? ZeroLogon is a vulnerability that allows us to exploit a cryptography flaw in Microsoft's Active Directory Netlogon Remote Protocol MS-NRPC, which allows users to log in to servers using NTLM...

dirkjanm-CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...

CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...

CVE-2020-1472

CVE-2020-1472 CVE 2020-1472 Script de validación Assumption: WinRM is enabled between domain controllers. Required permissions: root@kitploit: If child domains are present: Enterprise admin If single forest, single domain: Domain admin This script must be run on a primary domain controller with...

CVE-2026-54121

CVE-2026-54121 Certighost This is a proof-of-concept tool to demonstrace CVE-2026-54121 a.k.a Certighost. Read here https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26 for the detailed analysis. Install dependencies The proof of concept is a self-contained Python script. It requires...

CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Installation Before running the exploit you need t...

CVE-2020-1472-ZeroLogon-Demo-Detection-Mitigation

CVE-2020-1472 ZeroLogon Detection and Mitigation Demo This project demonstrates the detection and mitigation of the critical Windows vulnerability CVE-2020-1472, also known as ZeroLogon. The vulnerability allows attackers to gain unauthenticated administrative access. This was developed as part o...