Tools

deepquantum/dconstruct

A disassembler & experimental decompiler for TLOU2 DC Scripts.

notareaperbutdr34p3r/kerberos_cve-2022-33679

Python exploit for CVE-2022-33679 targeting Kerberos authentication to perform privilege escalation on Windows domain controllers via RC4 session key…

naxg/cve-2020-1472

CVE-2020-1472复现流程

dviros/credsleaker

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it…

hacksysteam/cve-2021-45067

Exploit for Adobe Reader DC out-of-bounds read vulnerability (CVE-2021-45067) that leaks sensitive information from the sandboxed process via…

whs-segfault/cve-2021-39863

Exploit for Adobe Acrobat Reader DC heap buffer overflow (CVE-2021-39863) with ASLR/DEP bypass, including root cause analysis and reversed vulnerable…

graysignal/cve-2024-4879-servicenow

Exploit for CVE-2024-4879 affecting Vancouver, Washington DC Now and Utah Platform releases

praison001/cve-2024-4879-servicenow

Exploit for CVE-2024-4879 affecting Vancouver, Washington DC Now and Utah Platform releases

infobyte/exploit-cve-2021-21086

Python-based exploit for CVE-2021-21086 in Adobe Acrobat Reader DC, generating malicious PDFs with shellcode execution via crafted font charstrings.

dr4g0n23/cve-2020-1472

Exploit script for CVE-2020-1472 (ZeroLogon) with automated privilege escalation, credential dumping via secretsdump, and lateral movement using…

gh-ost00/cve-2024-4879

Proof-of-concept exploit for CVE-2024-4879, a Jelly template injection vulnerability in ServiceNow enabling unauthenticated remote code execution.…

jayp232/the_big_zero

The following is the outcome of playing with CVE-2020-1472 and attempting to automate the process of gaining a shell on the DC

hnytgl/cve-2026-41089

CVE-2026-41089 是 Windows Netlogon 服务中一个关键的远程代码执行漏洞，单包即可崩溃 lsass.exe，导致域控制器在约 30-60 秒内重启。此期间该 DC 的所有域认证将失败。

iknowjason/purplecloud

A little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-1…

brut-security/cve-2024-4879

CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow

nst/spyphone

This project shows the kind of data a rogue iPhone application can collect.

nyambiblaise/domain-controller-dc-exploitation-with-metasploit-impacket

End-to-end Domain Controller exploitation using Metasploit and Impacket: discovered DC10, exploited Zerologon (CVE-2020-1472), extracted NTLM hashes,…