Exploit for zer0dump

kitploit · 2026-08-25

Description

PoC exploit leveraging Zerologon CVE-2020-1472 to fully take over unpatched Windows Domain Controllers.

Affected software

Microsoft Windows Server 1903 All versions

Microsoft Windows Server 1909 All versions

Microsoft Windows Server 2004 All versions

Microsoft Windows Server 2008= R2

All known vulnerabilities by product

Alt Linux Almalinux Astra Linux Centos Linuxmint Windows Server Red Hat Rocky Linux

CVSS 10.0 for CVE-2020-1472

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

References

https://github.com/SecureAuthCorp/impacket

https://github.com/dirkjanm

Exploit Details

Modified:2026-08-25 16:09

Last Seen:2026-08-26 06:41

Reporter:KitPloit

Tags

ZerologonCVE-2020-1472Domain ControllerPoC exploitWindowsfull takeover

Other exploits for CVE-2020-1472

ZeroLogon-Exploitation-Check

2026-08-29 KitPloitKITPLOIT

Zerologon_CVE-2020-1472

2026-08-29 KitPloitKITPLOIT

2026-08-29 KitPloitKITPLOIT

2026-08-29 KitPloitKITPLOIT

2026-08-29 KitPloitKITPLOIT

2026-08-29 KitPloitKITPLOIT

2026-08-29 KitPloitKITPLOIT

2026-08-29 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-BB00-ZER0DUMP
# Zer0Dump

Zer0dump एक PoC एक्सप्लॉइट/टूल है जो CVE-2020-1472 (Zerologon) से जुड़ी कमजोरियों का दुरुपयोग करके एक अप्रतिष्ठित विंडोज डोमेन नियंत्रक का पूर्ण सिस्टम अधिग्रहण आरंभ करने के लिए है।

विशेष धन्यवाद @dirkjanm और @SecureAuthCorp को।