Kerberos_CVE-2022-33679

KerberosCVE-2022-33679 REQUIREMENTS impacket==0.10.0 arc4==0.3.0 USE case: CVE-2022-33079.py -h -ts -debug -dc-ip ip address target serverName...

CVE-2020-1472-Easy

CVE-2020-1472-Easy 这绝对不是你会在任何你在乎的东西上运行的东西。 基于 @obfuscatee 和另一个来源的 writeup 及其工作成果构建 使用了以下代码： https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472 https://github.com/VoidSec/CVE-2020-1472 https://github.com/SecureAuthCorp/impacket 基本上会执行 zerologon 漏洞利用、转储...

NewMachineAccount

NewMachineAccount Descripción general NewMachineAccount.exe es una herramienta simple independiente en formato exe para crear nuevas cuentas de máquina con una contraseña personalizada dentro de un dominio especificado. Uso root@kitploit: NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain...

CVE-2026-41089

🚨 CVE-2026-41089 - 严重的Windows Netlogon远程代码执行（RCE） ⚠️ 一个严重的Windows Netlogon漏洞，允许未经身份验证的远程代码执行在域控制器上。 📖 概述 CVE-2026-41089 是一个影响 Windows Netlogon 服务的严重漏洞。 该漏洞源于一个基于栈的缓冲区溢出 ，使远程攻击者能够通过向易受攻击的域控制器发送特制请求来执行任意代码。 影响 远程代码执行（RCE） 无需身份验证 无需用户交互 可能导致完全控制Active Directory 勒索软件运营者和APT组织的高价值目标 🎯 漏洞详情...

CVE-2020-1472

CVE-2020-1472 CVE-2020-1472 - Zero Logon vulnerability Python implementation Description A Python script which uses the Impacket library to test for CVE-2020-1472 - Zerologon vulnerability credits to Secura research. The flaw stems from the Netlogon Remote Protocol, available on Windows domain...

CVE-2022-33679

CVE-2022-33679 基于 https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html 的一日 用法 root@kitploit: usage: CVE-2022-33079.py -h -ts -debug -dc-ip ip address target serverName 示例...

zeroscan

zeroscan Zeroscan is a Domain Controller vulnerability scanner, that currently includes checks for Zerologon CVE-2020-1472, MS-PAR/MS-RPRN and SMBv2 Signing. CVE-2020-1472: Uses a built-in script to check for Zerologon CVE-2020-1472, but does NOT attempt to exploit the target, it is simply a...

CVE-2026-54121

👻 CVE-2026-54121 — CertiGhost Active Directory 证书服务 AD CS 权限提升 👋 概述 CVE-2026-54121（"Certighost"） 是一个影响 Microsoft Active Directory 证书服务（AD CS） 的高危权限提升漏洞。 该漏洞允许已认证的域用户滥用证书注册行为，获取能够模拟 域控制器 的证书，从而可能导致 整个 Active Directory 环境被攻陷 。 ⚠️ 本仓库 仅用于 授权的安全研究、检测工程和防御性测试。 ✨ 功能特性 📖 技术漏洞说明 🔍 检测指南 🛡️ 缓解建议 🧪 入侵指标（IoCs）...

Zero-Logon-Exploit

Exploit ZeroLogon Un script en Python que utiliza la librería Impacket para explotar Zerologon CVE-2020-1472. Intenta realizar la omisión de autenticación de Netlogon. El script actualmente cambiará la contraseña a un valor nulo. Cuando un controlador de dominio está parcheado, el script de...

EUVD-2026-69002

Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root ...

Astra Linux – Vulnerability in Samba

A vulnerability was discovered in Samba’s “rpcecho” development server, a non-Windows RPC server used to test Samba’s DCE/RPC stack components. This vulnerability stems from an RPC function that can be blocked indefinitely. The issue arises because the “rpcecho” service operates with only one...

Astra Linux – Vulnerability in Samba

A flaw was discovered in the way that a Samba, as an Active Directory Domain Controller, can support a RODC Read-Only Domain Controller. This would allow a RODC to print administrator tickets...

CVE-2026-17614

A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile and getConfigurationFile methods in wildfly-core/deployment-repository do not validate that the resolved file path remains within the configured repository or configuration root directories. A...

CVE-2026-17614

CVE-2026-17614 affects WildFly-core in domain mode. The LocalFileRepository.getFile() and getConfigurationFile() do not ensure that resolved paths stay within the configured repository or configuration root, enabling a path traversal via crafted relative paths (e.g., ../../etc/passwd) sent throug...

CVE-2026-17614 Wildfly-core: path traversal on wildfly domain controller

A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile and getConfigurationFile methods in wildfly-core/deployment-repository do not validate that the resolved file path remains within the configured repository or configuration root directories. A...

EUVD-2026-52568

A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile and getConfigurationFile methods in wildfly-core/deployment-repository do not validate that the resolved file path remains within the configured repository or configuration root directories. A...

CVE-2026-58222 Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...

CVE-2026-58222 Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...

CVE-2026-58221

A flaw was found in Samba Active Directory Domain Controller AD DC. Improper authorization checks allow an authenticated low-privilege domain user to modify internal LDB special records through LDAP. By altering the DSDB module configuration, an attacker can bypass directory ACL enforcement on ne...

CVE-2026-41089-Netlogon-RCE — Updated!

🛡️ CVE-2026-41089-Netlogon-RCE - Analyze critical Windows service security vulnerabilities This repository provides tools to analyze and test the Netlogon vulnerability known as CVE-2026-41089. This tool helps security professionals identify if their Windows Domain Controllers face risks from this...