Microsoft CVE-2020-1472 - Netlogon Vulnerability - Zerologon

A quick overview of Microsoft's CVE-2020-1472 Netlogon vulnerability (Zerologn). A look at the Secura paper that describes the vulnerability, and then a walkthrough on how to test and exploit the vulnerability in a lab environment.

0:00 Intro
0:54 Secura Research Overview
4:07 Unpatched Domain Controller
4:56 Tools Download/Setup on Kali
6:49 Python Virtual Environment Setup
7:40 Test Impacket Secretsdump Before Exploit
9:15 Secura Test Tool to Verify Vulnerability
9:43 Zerologon Exploit to Wipe DC Password
10:19 Impacket Secretsdump Post Exploit
11:06 Wmiexec for Domain Compromise
11:50 Create new Domain Admin
13:46 Patched DC Results

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1472
https://www.secura.com/blog/zero-logon
https://github.com/SecuraBV/CVE-2020-1472
https://github.com/risksense/zerologon
https://github.com/SecureAuthCorp/impacket

Видео Microsoft CVE-2020-1472 - Netlogon Vulnerability - Zerologon канала Kevin Fox