13 matches found
zerologon
zerologon script zerologon para explotar CVE-2020-1472 CVSS 10/10 Código de explotación basado en https://www.secura.com/blog/zero-logon y https://github.com/SecuraBV/CVE-2020-1472. Investigación original y escáner por Secura, modificaciones por RiskSense Inc. https://github.com/risksense/zerolog...
zerologon
ZeroLogon 漏洞利用脚本 利用代码基于 https://www.secura.com/blog/zero-logon 和 https://github.com/SecuraBV/CVE-2020-1472。原始研究和扫描工具由 Secura 完成，RiskSense Inc. 进行了修改。 要利用此漏洞，请清除先前安装的任何 Impacket 版本，并从 https://github.com/SecureAuthCorp/impacket/commit/b867b21 或更新版本安装 Impacket。然后执行： root@kitploit: python3 setemptypw...
Netlogon Weak Cryptographic Authentication
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'windowserror' class MetasploitModule 'Netlogon Weak Cryptographic Authentication', 'Description' = %q A vulnerability exists within the Netlogon authentication...
ZeroLogon - Netlogon Elevation of Privilege
Exploit Title: ZeroLogon - Netlogon Elevation of Privilege Date: 2020-10-04 Exploit Author: West Shepherd Vendor Homepage: https://www.microsoft.com Version: Microsoft Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 Tested on: Microsof...
Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange
I would like to start this post by talking about Microsoft vulnerabilities, which recently turned out to be much more serious than it seemed at first glance. Older Vulnerabilities with exploits "Zerologon" Netlogon RCE CVE-2020-1472 One of them is, of course, the Netlogon vulnerability from the...
Exploit for CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impack...
Detecting and Preventing Critical ZeroLogon Windows Server Vulnerability
If you're administrating Windows Server, make sure it's up to date with all recent patches issued by Microsoft, especially the one that fixes a recently patched critical vulnerability that could allow unauthenticated attackers to compromise the domain controller. Dubbed 'Zerologon' CVE-2020-1472...
DHS Issues Dire Patch Warning for ‘Zerologon’
Federal agencies that haven’t patched their Windows Servers against the ‘Zerologon’ vulnerability by Monday Sept. 21 at 11:59 pm EDT are in violation of a rare emergency directive issued by the Secretary of Homeland Security. With only hours until the deadline for the directive, issued on Friday,...
Exploit for CVE-2020-1472
CVE-2020-1472 POC Requires the latest impacket from GitHubh...
Exploit for CVE-2020-1472
!Pythonpython-shield CVE-2020-1472 CVE-2020-1472 - Zero...
Exploit for CVE-2020-1472
CVE-2020-1472 POC Requires the latest impacket from GitHubh...
Windows Exploit Released For Microsoft ‘Zerologon’ Flaw
Proof-of-concept PoC exploit code has been released for a Windows flaw, which could allow attackers to infiltrate enterprises by gaining administrative privileges, giving them access to companies’ Active Directory domain controllers DCs. The vulnerability, dubbed “Zerologon,” is a...