Exploit for #VU45628 Permissions, Privileges, and Access Controls in Windows Server

Vulnerability identifier: #VU45628

Vulnerability risk: High

CVSSv4.0: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber]

CVE-ID: CVE-2020-1472

CWE-ID: CWE-264

Exploitation vector: Network

Exploits in database: 57

• January 7, 2024
  • 0logon (MS-NRPC (Microsoft NetLogon Remote Protocol)/CVE-2020-1472) [Github]
• May 7, 2023
  • Zerologon-CVE-2020-1472 (Zerologon exploit for CVE-2020-1472) [Github]
• May 2, 2023
  • CVE-2020-1472 () [Github]
• February 20, 2023
  • CVE-2020-1472-LAB (Lab introduction to ZeroLogon) [Github]
• November 22, 2022
  • CVE-2020-1472 () [Github]
• September 30, 2022
  • MassZeroLogon (Tool for mass testing ZeroLogon vulnerability CVE-2020-1472) [Github]
• September 22, 2022
  • CVE-2020-1472 () [Github]
• August 28, 2022
  • CVE-2020-1473 (Exploit for zerologon cve-2020-1472,And automatically recover the domain control machine hash) [Github]
• June 26, 2022
  • ad-scanner (Active Directory scanner for MS17-010 MS14-068 CVE-2020-1472 etc...) [Github]
• June 23, 2022
  • CVE-2020-1472 (ZeroLogon exploitation script,One-click recovery of domain controller machine Hash) [Github]
• February 22, 2022
  • dirkjanm-CVE-2020-1472 () [Github]
• July 1, 2021
  • Python_pentest_static_binaries (Static standalone binaries for Windows and Linux (both x64) of dirkjanm's CVE-2020-1472 POC Python scripts) [Github]
• June 17, 2021
  • ZeroLogon - Netlogon Elevation of Privilege [Exploit-DB]
• April 23, 2021
  • CVE-2020-1472 () [Github]
• April 6, 2021
  • Zerologon (Exploit Code for CVE-2020-1472 aka Zerologon) [Github]
• March 1, 2021
  • ZeroLogon-Example (Modified the test PoC from Secura, CVE-2020-1472, to change the machine password to null) [Github]
  • ZeroLogon-Exploit (Modified the test PoC from Secura, CVE-2020-1472, to change the machine password to null) [Github]
• January 3, 2021
  • zerologon (zerologon script to exploit CVE-2020-1472 CVSS 10/10) [Github]
• November 17, 2020
  • CVE-2020-1472 () [Github]
• November 11, 2020
  • CVE-2020-1472 (CVE-2020-1472漏洞复现过程) [Github]
• November 10, 2020
  • The_big_Zero (The following is the outcome of playing with CVE-2020-1472 and attempting to automate the process of gaining a shell on the DC) [Github]
  • dirkjanm_CVE-2020-1472_static_binaries (Static standalone binaries for Windows and Linux (both x64) of dirkjanm's CVE-2020-1472 POC Python scripts) [Github]
• November 6, 2020
  • CVE-2020-1472-visualizer () [Github]
• October 10, 2020
  • cve-2020-1472 () [Github]
• October 5, 2020
  • ADZero (Zerologon AutoExploit Tool | CVE-2020-1472) [Github]
• September 30, 2020
  • Zerologon_CVE-2020-1472 (POC for checking multiple hosts for Zerologon vulnerability) [Github]
• September 28, 2020
  • CVE-2020-1472-02- () [Github]
  • CVE-2020-1472 (CVE-2020-1472) [Github]
• September 25, 2020
  • CVE-2020-1472 (CVE 2020-1472 Script de validación ) [Github]
• September 23, 2020
  • Netlogon Weak Cryptographic Authentication [Metasploit]
• September 21, 2020
  • CVE-20200-1472 () [Github]
  • CVE-2020-1472 ( CVE-2020-1472复现时使用的py文件整理打包) [Github]
  • CVE-2020-1472 () [Github]
  • CVE-2020-1472 () [Github]
  • Zerologon (Zerologon Exploit | CVE-2020-1472) [Github]
  • CVE-2020-1472-Easy (A simple implementation/code smash of a bunch of other repos) [Github]
  • zerologon (Test script for CVE-2020-1472 for both RPC/TCP and RPC/SMB) [Github]
• September 16, 2020
  • cve-2020-1472_Tool-collection (cve-2020-1472_Tool collection) [Github]
  • CVE-2020-1472 () [Github]
  • cve-2020-1472 (cve-2020-1472 复现利用及其exp) [Github]
  • CVE-2020-1472 (https://github.com/dirkjanm/CVE-2020-1472) [Github]
  • CVE-2020-1472 (CVE-2020-1472漏洞复现过程) [Github]
  • CVE-2020-1472 () [Github]
  • CVE-2020-1472 (CVE-2020-1472复现流程) [Github]
  • CVE-2020-1472 () [Github]
  • SecuraBV-CVE-2020-1472 () [Github]
  • CVE-2020-1472 (CVE-2020-1472) [Github]
  • CVE-2020-1472 (Exploit Code for CVE-2020-1472 aka Zerologon) [Github]
  • zerologon-CVE-2020-1472 (PoC for Zerologon (CVE-2020-1472) - Exploit) [Github]
  • zer0dump (Abuse CVE-2020-1472 (Zerologon) to take over a domain and then repair the local stored machine account password.) [Github]
  • CVE-2020-1472-EXP (Ladon Moudle CVE-2020-1472 Exploit 域控提权神器) [Github]
  • CVE-2020-1472 (Test tool for CVE-2020-1472) [Github]
  • CVE-2020-1472 () [Github]
  • zerologon (Exploit for zerologon cve-2020-1472) [Github]
  • CVE-2020-1472 (PoC for Zerologon - all research credits go to Tom Tervoort of Secura) [Github]
  • CVE-2020-1472- (CVE-2020-1472漏洞复现过程) [Github]
• September 1, 2020
  • CVE-2020-1472-visualizer () [Github]

Vulnerable software:
Windows Server
Operating systems & Components / Operating system

Vendor: Microsoft