adfly

adfly active directory query tool using LDAP Protocol , helps red teamer / penetration testers to validate users credentials , retrieve information about AD users , AD groups AD fly is Tool uses LDAP Protocol for users authentication access and queries of information ,since AD fly uses LDAP for...

Zerologon_CVE-2020-1472

Zerologon CVE-2020-1472 Este script se creó para comprobar de forma masiva los controladores de dominio en busca de la vulnerabilidad Zerologon. Nota Las vulnerabilidades de Zerologon son peligrosas para el controlador de dominio; no uses el exploit en servidores de producción. Argumentos --ip...

Set-ZerologonMitigation

Set-ZerologonMitigation Proteja sus controladores de dominio contra Zerologon CVE-2020-1472. Uso Después de instalar la actualización de seguridad de agosto de 2020 o una versión acumulativa posterior, simplemente ejecute el script en cada uno de sus controladores de dominio. root@kitploit:...

zerologon

zerologon script zerologon para explotar CVE-2020-1472 CVSS 10/10 Código de explotación basado en https://www.secura.com/blog/zero-logon y https://github.com/SecuraBV/CVE-2020-1472. Investigación original y escáner por Secura, modificaciones por RiskSense Inc. https://github.com/risksense/zerolog...

CVE-2021-1675-PrintNightmare-Analysis

Investigación de vulnerabilidades: Elevación local de privilegios y RCE a través de Windows Print Spooler PrintNightmare / CVE-2021-1675 El repositorio contiene un informe técnico detallado write-up y el análisis del concepto de explotación de una vulnerabilidad crítica en el servicio del...

zerologon

zerologon Comprueba eventos que indican dispositivos no compatibles - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 En agosto, Microsoft publicó un parche para CVE-2020-1472. Con ese parche hay un período de espera hasta el 9 de febrero de 2021 en el que se...

Astra Linux – Vulnerability in Samba

A design flaw was identified in Samba’s DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers RODCs. This flaw allows RODCs and users with the GETCHANGES permission to access all attributes, including sensitive...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089-Netlogon-RCE Technical analysis and Proof-of-Co...

samba: Fix of CVE-2026-4408

CVE-2026-4408: Escape/mask client-controlled username before %u substitution in 'check password script' to prevent remote command execution; restrict samrValidatePassword to DCs...

Important: samba

Issue Overview: unauthenticated udp packet crashes AD DC nbt server CVE-2026-3238 Samba file servers and classic non-AD domain controllers offer the SamValidatePasswordChange and SamValidatePasswordReset RPC services on the SAMR DCE/RPC service when running over NCACNIPTCP. Both services pass a...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...