adfly

adfly active directory query tool using LDAP Protocol , helps red teamer / penetration testers to validate users credentials , retrieve information about AD users , AD groups AD fly is Tool uses LDAP Protocol for users authentication access and queries of information ,since AD fly uses LDAP for...

Zerologon_CVE-2020-1472

Zerologon CVE-2020-1472 This script is made for bulk checking your domain controllers for the Zerologon vulnerability. Note Zerologon vulnerabilities are dangerous for your domain controller, dont use the exploit on production servers. Arguments --ip Ip address for check on CVE-2020-1472 --file...

CVE-2021-1675-PrintNightmare-Analysis

Schwachstellenforschung: Lokale Rechteausweitung und RCE über Windows Print Spooler PrintNightmare / CVE-2021-1675 Dieses Repository enthält einen detaillierten technischen Bericht Write-up und die Analyse eines Exploit-Konzepts für die kritische Schwachstelle im Windows-Druckwarteschlangendienst...

zerologon

zerologon script zerologon para explorar CVE-2020-1472 CVSS 10/10 Código do exploit baseado em https://www.secura.com/blog/zero-logon e https://github.com/SecuraBV/CVE-2020-1472. Pesquisa original e scanner por Secura, modificações por RiskSense Inc. https://github.com/risksense/zerologon Para...

Set-ZerologonMitigation

Set-ZerologonMitigation Schützen Sie Ihre Domänencontroller vor Zerologon CVE-2020-1472. Verwendung Nach der Installation des August-2020-Sicherheitsupdates oder einer späteren kumulativen Version führen Sie das Skript einfach auf jedem von Ihren Domänencontrollern aus. root@kitploit:...

zerologon

zerologon Controlla gli eventi che indicano dispositivi non compatibili - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 Ad agosto Microsoft ha corretto CVE-2020-1472. Con quella patch c'è un periodo di attesa fino al 9 febbraio 2021 in cui le connessioni non sicur...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089-Netlogon-RCE Technical analysis and Proof-of-Co...

samba: Fix of CVE-2026-4408

CVE-2026-4408: Escape/mask client-controlled username before %u substitution in 'check password script' to prevent remote command execution; restrict samrValidatePassword to DCs...

Important: samba

Issue Overview: unauthenticated udp packet crashes AD DC nbt server CVE-2026-3238 Samba file servers and classic non-AD domain controllers offer the SamValidatePasswordChange and SamValidatePasswordReset RPC services on the SAMR DCE/RPC service when running over NCACNIPTCP. Both services pass a...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

samba: Remote Code Execution in SAMR

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper...