cve-2020-1472

cve-2020-1472 @toc Vulnerability Principle The principle is relatively complex. If interested, you can check the article at the following link: https://www.freebuf.com/articles/system/249860.html Exploitation 1. Modify the file impacket.dcerpc.v5.nrpc Need to use the...

ZeroLogon

ZeroLogon CVE-2020-1472 C++ version. This tool directly resets the machine account password. It does not have recovery functionality. Use with caution in real-world scenarios. Referencing the BOF version: ZeroLogon-BOF, this is a modified single-file EXE version. After compilation, it is only abo...

ZerologonWithImpacket-CVE2020-1472

Zerologon and Impacket Combination Exploit CVE-2020-1472 This repository contains an updated implementation 2024 of the Zerologon exploit combined with Impacket tools to exploit CVE-2020-1472 Zerologon. This exploit targets Windows Server environments to manipulate machine account passwords and...

ZeroLogon-Exploit

ZeroLogon - Exploit and Example Modified the test PoC from Secura, CVE-2020-1472, in order to change the machine's password to null. Changing the password on the machine uses Microsoft's NetrServerPasswordSet2 function. This exploit takes advantage of Impacket's nrpc.py module to call...

zerologon-lab

zerologon-lab Scripts for a lab environment demonstrating the Zerologon CVE-2020-1472 vulnerability. Usage zerologon.py root@kitploit: zerologon.py -h --reset --restore HEX dcname dcip Attempt to exploit the Zerologon vulnerability against a Domain Controller. Arguments: dcname: The NetBIOS name ...

NewMachineAccount

NewMachineAccount 概要 NewMachineAccount.exe は、指定したドメイン内にカスタムパスワードを使用して新しいマシンアカウントを作成するための、シンプルなスタンドアロンexeツールです。 使用方法 root@kitploit: NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain -password -ou -user -pass -uac パラメータ -dc : 使用するドメインコントローラを指定します。 -name : 作成するマシンアカウントの名前。 -domain :...

Exploit for Improper Authorization in Microsoft

CVE-2026-54121-CertiGhost This POC is the original POC code f...

CVE-2026-41939

Summary: CVE-2026-41939 affects Care Everywhere Gateway 14.3.10, where a hard-coded credential flaw in the bundled WildFly 8.2.0.Final management interface enables unauthenticated remote access to the WildFly admin console (port 20990) with default credentials. This allows deployment of a malicio...

Exploit for Improper Authorization in Microsoft

CVE-2026-54121 Certighost - patched fork A working fork of...

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Controller accounts carry directory...

CLSA-2026-1777321102 Fix CVE(s): CVE-2022-26923, CVE-2022-32743

SECURITY UPDATE: Samba AD DC did not enforce the Validated-DNS-Host-Name write right, allowing an unprivileged authenticated user with machine account write access e.g. SeMachineAccountPrivilege to set the dNSHostName attribute to an arbitrary value, bypassing the MS-ADTS requirement that it matc...

Unisys WebPerfect Image Suite 安全漏洞

Unisys WebPerfect Image Suite is an enterprise document imaging and management system developed by Unisys, Inc. Both versions of Unisys WebPerfect Image Suite 3.0.3960.22810 and 3.0.3960.22604 contain security vulnerabilities. These vulnerabilities stem from the exposure of deprecated.NET Remotin...

EUVD-2015-8349

Malware in sbrugna...

CVE-2024-1243

The CVE-2024-1243 entry concerns Wazuh agent for Windows prior to 4.8.0. It states improper input validation can be exploited by an attacker who controls the Wazuh server or agent key to configure the agent to connect to a malicious UNC path, leading to leakage of the machine account NetNTLMv2 ha...

Netlogon Weak Cryptographic Authentication

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'windowserror' class MetasploitModule 'Netlogon Weak Cryptographic Authentication', 'Description' = %q A vulnerability exists within the Netlogon authentication...

How to Troubleshoot Provisioning Services Server Machine Account Password

This article contains information about troubleshooting the Provisioning Services PVS Server machine account passwords...

Machine Account Password Fails to Update

While configuring Active Directory machine account password management in the virtual disk file properties, the machine account password expires after the determined value timeout without successfully changing...

CVE-2023-38994

The 'checkuniventionjoinstatus' prometheus monitoring script and other scripts in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in the process list allowing attackers with local ssh access to gain higher privileges and perform followup attacks. By default, the configuratio...

Default configuration

The 'checkuniventionjoinstatus' prometheus monitoring script and other scripts in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in the process list allowing attackers with local ssh access to gain higher privileges and perform followup attacks. By default, the configuratio...

PT-2023-7018 · Univention · Univention Corporate Server

Name of the Vulnerable Software and Affected Versions: Univention Corporate Server UCS versions 5.0-5 Description: The issue is related to the check univention joinstatus prometheus monitoring script, which reveals the LDAP plaintext password of the machine account in the process list. This allow...