Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Need more test] [module] Add zerologon autopwn #5

Closed
wants to merge 1 commit into from
Closed

[Need more test] [module] Add zerologon autopwn #5

wants to merge 1 commit into from

Conversation

XiaoliChan
Copy link
Contributor

Zerologon autopwn with auto restore DC password

image

@NeffIsBack NeffIsBack added the enhancement New feature or request label Sep 9, 2023
Marshall-Hallenbeck
Marshall-Hallenbeck requested changes Sep 9, 2023
View reviewed changes
Copy link
Collaborator

@Marshall-Hallenbeck Marshall-Hallenbeck left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All instances of single quotes on the outside should be changed to double quotes for consistency. I tagged a bunch of places where the variable naming should be fixed to be Pythonic.

Which Windows versions did you test this against so far?

cme/modules/zerologon.py Outdated Show resolved Hide resolved
cme/modules/zerologon.py Outdated Show resolved Hide resolved
cme/modules/zerologon.py Outdated Show resolved Hide resolved
cme/modules/zerologon.py Outdated Show resolved Hide resolved
cme/modules/zerologon.py Outdated Show resolved Hide resolved
cme/modules/zerologon.py Outdated Show resolved Hide resolved
cme/modules/zerologon.py Outdated Show resolved Hide resolved
cme/modules/zerologon.py Outdated Show resolved Hide resolved
cme/modules/zerologon.py Outdated Show resolved Hide resolved
@XiaoliChan
Copy link
Contributor Author

Which Windows versions did you test this against so far?

most of server 2012 to server 2008 which I doing attack in real-world

@Marshall-Hallenbeck
Copy link
Collaborator

most of server 2012 to server 2008 which I doing attack in real-world

Any newer versions, or non-server?

@XiaoliChan
Copy link
Contributor Author

Any newer versions, or non-server?

Not yet, but zerologon only attack DC, which means windows server edition.

@XiaoliChan
Copy link
Contributor Author

@Marshall-Hallenbeck I would like to convert this to draft, this is dangerous exploit, let me test it with doing more real attack

@Marshall-Hallenbeck
Copy link
Collaborator

@Marshall-Hallenbeck I would like to convert this to draft, this is dangerous exploit, let me test it with doing more real attack

Sounds good

@XiaoliChan XiaoliChan marked this pull request as draft September 10, 2023 02:11
@XiaoliChan XiaoliChan changed the title [module] Add zerologon autopwn [Need more test] [module] Add zerologon autopwn Sep 10, 2023
@bongobongoland
Copy link
Contributor

@XiaoliChan I have a bad feeling this is not going to work if you run it from Windows. Because of impacket.
As far as I know, secretsdump doesn't function properly under Win.

@bongobongoland
Copy link
Contributor

Ok, it does work :) I was wrong.
Looking forward to autopwning using this mod.

@Marshall-Hallenbeck Marshall-Hallenbeck changed the base branch from main to develop October 2, 2023 21:54
@Marshall-Hallenbeck Marshall-Hallenbeck changed the base branch from develop to main November 13, 2023 15:18
@XiaoliChan XiaoliChan closed this Feb 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@Marshall-Hallenbeck Marshall-Hallenbeck Marshall-Hallenbeck requested changes

@zblurx zblurx Awaiting requested review from zblurx zblurx will be requested when the pull request is marked ready for review zblurx is a code owner

@NeffIsBack NeffIsBack Awaiting requested review from NeffIsBack NeffIsBack will be requested when the pull request is marked ready for review NeffIsBack is a code owner

@mpgn mpgn Awaiting requested review from mpgn mpgn will be requested when the pull request is marked ready for review mpgn is a code owner

Assignees
No one assigned
Labels
enhancement New feature or request requires testing
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@XiaoliChan @Marshall-Hallenbeck @bongobongoland @NeffIsBack