Exploit for Improper Certificate Validation in Microsoft

githubexploit · 2023-10-17

Description

Exploit for improper certificate validation on Microsoft systems including NoPac, ZeroLogon, PrintNightMare, and CVE-2022-26923.

Affected software

Microsoft Windows 10 1507< 10.0.10240.19297

Microsoft Windows 10 1607< 10.0.14393.5850

Microsoft Windows 10 1809< 10.0.17763.4252

Microsoft Windows 10 1909< 10.0.18363.2274

All known vulnerabilities by product

Active Directory Domain Services Windows Active Directory Certificate Services Windows

CVSS 9.0 for CVE-2022-26923

9.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

90%confidence this exploit runs

Based on 13 file(s) in the source

EPSS Score

83.0%higher than 99.6% of all CVEs

Updated 2026-07-28

Exploit Details

Modified:2025-08-29 08:04

Last Seen:2025-09-06 09:34

Reporter:evilashz

Written in:Python

Last commit:2023-10-23

Tags

Microsoft certificate validationNoPacZeroLogonPrintNightMareCVE-2022-26923

Other exploits for CVE-2022-26923

Exploit for Improper Certificate Validation in Microsoft

2026-05-21 victorhugomierezGITHUB

Exploit for Improper Certificate Validation in Microsoft

2026-02-21 EliasdekiniweekGITHUB

Active Directory Certificate Services (ADCS) Privilege Escalation (Certifried)

2024-08-31 Christophe de la Fuente, Erik Wynter, Oliver Lyak, CravateRouge, metasploit.comPACKETSTORMRuby

Active Directory Certificate Services (ADCS) privilege escalation (Certifried)

2023-01-27 Oliver Lyak, CravateRouge, Erik Wynter, Christophe De La FuenteMETASPLOITRuby

Exploit for Improper Certificate Validation in Microsoft

2022-08-17 lsecqtGITHUB

Exploit for Improper Certificate Validation in Microsoft

2022-05-14 LudovicPathoGITHUB

Exploit for Improper Certificate Validation in Microsoft

2022-05-14 LudovicPathoGITHUB

Exploit Code

README4 lines

## https://sploitus.com/exploit?id=A0B3DED7-72A4-500D-A58C-C86D78CB5E3D
# ADVulnScanner

Detects common vulnerabilities in domestic environments, including: NoPac, ZeroLogon, CVE-2022-26923, PrintNightMare. ![image-20231023124447347](https://images-1258433570.cos.ap-beijing.myqcloud.com/imagesimage-20231023124447347.png)