adfly

adfly LDAP 프로토콜을 사용하는 액티브 디렉토리 쿼리 도구로, 레드 팀원/침투 테스터가 사용자 자격 증명을 검증하고 AD 사용자 및 AD 그룹에 대한 정보를 검색하는 데 도움을 줍니다. AD fly는 사용자 인증 액세스 및 정보 쿼리를 위해 LDAP 프로토콜을 사용하는 도구입니다. AD fly는 연결에 LDAP을 사용하므로 인증에 유효한 계정만 필요합니다. AD fly를 사용하기 위해 AD의 일부일 필요는 없습니다. 공격자 머신에서 레드 팀원은 LDAP을 통해 Active Directory에 도달하여 작전에 필요한 정보...

Zerologon_CVE-2020-1472

Zerologon CVE-2020-1472 このスクリプトは、ドメインコントローラのZerologon脆弱性を一括チェックするために作成されました。 注意 Zerologon脆弱性はドメインコントローラにとって危険です。本番サーバではエクスプロイトを使用しないでください。 引数 --ip CVE-2020-1472のチェック対象IPアドレス --file IPアドレス一覧ファイルのパス --threads スレッド数 --name NetBIOSコンピュータ名、--ipフラグと併用 使用例 python3 checkcve-2020-1472.py ---ip python3...

CVE-2021-1675-PrintNightmare-Analysis

Schwachstellenforschung: Lokale Rechteausweitung und RCE über Windows Print Spooler PrintNightmare / CVE-2021-1675 Dieses Repository enthält einen detaillierten technischen Bericht Write-up und die Analyse eines Exploit-Konzepts für die kritische Schwachstelle im Windows-Druckwarteschlangendienst...

zerologon

zerologon script zerologon para explorar CVE-2020-1472 CVSS 10/10 Código do exploit baseado em https://www.secura.com/blog/zero-logon e https://github.com/SecuraBV/CVE-2020-1472. Pesquisa original e scanner por Secura, modificações por RiskSense Inc. https://github.com/risksense/zerologon Para...

Set-ZerologonMitigation

Set-ZerologonMitigation Schützen Sie Ihre Domänencontroller vor Zerologon CVE-2020-1472. Verwendung Nach der Installation des August-2020-Sicherheitsupdates oder einer späteren kumulativen Version führen Sie das Skript einfach auf jedem von Ihren Domänencontrollern aus. root@kitploit:...

zerologon

zerologon Controlla gli eventi che indicano dispositivi non compatibili - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 Ad agosto Microsoft ha corretto CVE-2020-1472. Con quella patch c'è un periodo di attesa fino al 9 febbraio 2021 in cui le connessioni non sicur...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089-Netlogon-RCE Technical analysis and Proof-of-Co...

samba: Fix of CVE-2026-4408

CVE-2026-4408: Escape/mask client-controlled username before %u substitution in 'check password script' to prevent remote command execution; restrict samrValidatePassword to DCs...

Important: samba

Issue Overview: unauthenticated udp packet crashes AD DC nbt server CVE-2026-3238 Samba file servers and classic non-AD domain controllers offer the SamValidatePasswordChange and SamValidatePasswordReset RPC services on the SAMR DCE/RPC service when running over NCACNIPTCP. Both services pass a...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

samba: Remote Code Execution in SAMR

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper...