215 matches found
adfly
adfly active directory query tool using LDAP Protocol , helps red teamer / penetration testers to validate users credentials , retrieve information about AD users , AD groups AD fly is Tool uses LDAP Protocol for users authentication access and queries of information ,since AD fly uses LDAP for...
Zerologon_CVE-2020-1472
Zerologon CVE-2020-1472 This script is made for bulk checking your domain controllers for the Zerologon vulnerability. Note Zerologon vulnerabilities are dangerous for your domain controller, dont use the exploit on production servers. Arguments --ip Ip address for check on CVE-2020-1472 --file...
CVE-2021-1675-PrintNightmare-Analysis
Schwachstellenforschung: Lokale Rechteausweitung und RCE über Windows Print Spooler PrintNightmare / CVE-2021-1675 Dieses Repository enthält einen detaillierten technischen Bericht Write-up und die Analyse eines Exploit-Konzepts für die kritische Schwachstelle im Windows-Druckwarteschlangendienst...
zerologon
zerologon script zerologon para explorar CVE-2020-1472 CVSS 10/10 Código do exploit baseado em https://www.secura.com/blog/zero-logon e https://github.com/SecuraBV/CVE-2020-1472. Pesquisa original e scanner por Secura, modificações por RiskSense Inc. https://github.com/risksense/zerologon Para...
Set-ZerologonMitigation
Set-ZerologonMitigation Schützen Sie Ihre Domänencontroller vor Zerologon CVE-2020-1472. Verwendung Nach der Installation des August-2020-Sicherheitsupdates oder einer späteren kumulativen Version führen Sie das Skript einfach auf jedem von Ihren Domänencontrollern aus. root@kitploit:...
zerologon
zerologon Controlla gli eventi che indicano dispositivi non compatibili - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 Ad agosto Microsoft ha corretto CVE-2020-1472. Con quella patch c'è un periodo di attesa fino al 9 febbraio 2021 in cui le connessioni non sicur...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089-Netlogon-RCE Technical analysis and Proof-of-Co...
samba: Fix of CVE-2026-4408
CVE-2026-4408: Escape/mask client-controlled username before %u substitution in 'check password script' to prevent remote command execution; restrict samrValidatePassword to DCs...
Important: samba
Issue Overview: unauthenticated udp packet crashes AD DC nbt server CVE-2026-3238 Samba file servers and classic non-AD domain controllers offer the SamValidatePasswordChange and SamValidatePasswordReset RPC services on the SAMR DCE/RPC service when running over NCACNIPTCP. Both services pass a...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 !TIP If the setup does not start, add t...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 !TIP If the setup does not start, add t...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 !TIP If the setup does not start, add t...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 !TIP If the setup does not start, add t...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 !TIP If the setup does not start, add t...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 !TIP If the setup does not start, add t...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 !TIP If the setup does not start, add t...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 !TIP If the setup does not start, add t...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 !TIP If the setup does not start, add t...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 !TIP If the setup does not start, add t...
samba: Remote Code Execution in SAMR
A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper...