CVE-2020-1472-LAB

ZeroLogon 测试脚本 一个用于测试 ZeroLogon 漏洞（CVE-2020-1472）的实验环境。 它包含一个使用 Impacket 库测试漏洞的 Python 脚本，以及一台配置为域控制器（DC）的虚拟机（VM），运行 Windows Server 2019。 该脚本尝试执行 Netlogon 身份验证绕过。 成功执行绕过后脚本将立即终止，不进行任何 Netlogon 操作。 当 DC 已修补时，检测脚本会在发送多对 RPC 调用后放弃，并得出目标不脆弱（假阴性概率为 0.04%）的结论。 要求 VMWare workstation/fusion Vagrant...

Zero-Logon-Exploit

ZeroLogon 漏洞利用 一个使用 Impacket 库来利用 Zerologon（CVE-2020-1472）漏洞的 Python 脚本。 该脚本尝试执行 Netlogon 身份验证绕过。目前该脚本会将密码更改为空值。 当域控制器已打补丁时，检测脚本会在发送 2000 对 RPC 调用后放弃，并判定目标不存在漏洞 （误报率为 0.04%）。 安装 安装步骤如下： root@kitploit: apt install python3-venv python3 -m venv impacketEnv source impacketEnv/bin/activate git clone...

CVE-2020-1472-ZeroLogon-Demo-Detection-Mitigation

CVE-2020-1472 ZeroLogon 検出および緩和デモ このプロジェクトは、ZeroLogon としても知られる深刻なWindows脆弱性CVE-2020-1472の検出と緩和を示しています。この脆弱性により、攻撃者は認証なしで管理者アクセスを取得できます。これは学校のサイバーセキュリティプロジェクトの一環として開発されました。PoCコードのクレジットはTom Tervoort（Secura）に、SuricataルールセットのクレジットはProofpoint Emerging Threatsに帰属します。 主な構成要素:...

Exploit for CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

Exploit for CVE-2020-1472

PoC exploit for CVE-2020-1472, a vulnerability in the Windows Netlogon service that allows authentication bypass. The exploit uses the Impacket library to test the vulnerability and attempt to perform a Netlogon authentication bypass. It targets the Netlogon service on a domain controller and sen...

Exploit for CVE-2020-1472

PoC exploit for CVE-2020-1472, a vulnerability in the Windows Netlogon service that allows for authentication bypass. The exploit uses the Impacket library to test the vulnerability and attempts to perform a Netlogon authentication bypass. The script will immediately terminate when successfully...

Exploit for CVE-2020-1472

PoC exploit for CVE-2020-1472, a vulnerability in the Windows Netlogon service that allows for authentication bypass. The exploit uses the Impacket library to test the vulnerability and attempts to perform a Netlogon authentication bypass. The script will immediately terminate when successfully...

Exploit for CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impack...

Exploit for CVE-2020-1472

!Pythonpython-shield CVE-2020-1472 CVE-2020-1472 - Zero...

CVE-2019-1424

A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon Security Feature Bypass Vulnerability'...

CVE-2019-1019

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access...