關於 zerologon ，我們在網路上蒐集到這些相關的討論、資訊與評價

#11. Zerologon - Wikipedia

Zerologon (formally: CVE-2020-1472) is a critical vulnerability in Microsoft's authentication protocol Netlogon, as implemented in some versions of ...

#12. Zerologon (CVE-2020-1472): Overview, Exploit Steps and ...

This vulnerability allows an unauthenticated attacker with network access to a domain controller, to establish a vulnerable Netlogon session and ...

#13. 微軟預告2月將釋出Zerologon漏洞第二階段修補程式

微軟本周預告，將在2月9日的安全更新中，進行Zerologon第二階段的修補。 編號CVE-2020-1472的漏洞出現在Microsoft Windows Netlogon的遠端 ...

#14. QNAP 針對Zerologon 漏洞公布資安警訊，受影響機種用戶應即 ...

QNAP說明，若用戶之NAS不是部署為Active Directory 的domain controller ，不受Zerologon 漏洞影響。因此非相關之用戶在固定排程時更新即可，不需受時間 ...

#15. Microsoft Netlogon 權限提高(Zerologon)（遠端） - Tenable

The Netlogon service on the remote host is vulnerable to the zerologon vulnerability. (Nessus Plugin ID 140657)

#16. What Is Zerologon and How Do You Mitigate It?

The Zerologon vulnerability is a flaw in the cryptographic authentication scheme used by Netlogon that can enable an attacker to bypass ...

#17. Zerologon | Secura - Take Control of Your Digital Security

Zerologon : Instantly Become Domain Admin by Subverting Netlogon Cryptography (CVE-2020-1472). Blog post 11 September 2020 by Tom Tervoort, Senior Security ...

#18. Zeek package to detect Zerologon - GitHub

A Zeek detection package for CVE-2020-1472, also known as Zerologon, which is a CVSS 10.0 privilege escalation vulnerability against the Netlogon protocol ...

#19. Windows重大漏洞Zerologon可讓駭客輕易掌控AD網域

Windows重大漏洞Zerologon可讓駭客輕易掌控AD網域. 9 月16, 2020 | News. 作者/林妍溱 位於Netlogon遠端協定的CVE-2020-1472漏洞，可讓未授權使用者取得管理員權限來 ...

#20. Zerologon - Security Advisory | QNAP

The Zerologon vulnerability has been reported to affect some versions of QTS. If exploited, this elevation of privilege vulnerability allows remote attackers to ...

#21. ZeroLogon (CVE-2020-1472) 漏洞利用原创 - CSDN博客

ZeroLogon (CVE-2020-1472) 是近几年Windows上曝出的高危漏洞，CVSS V3.0评分10.0，攻击者只需要定位域控主机名及IP，并且可以访问域控，就可以在无需 ...

#22. Zerologon :: Guardicore Infection Monkey - Documentation Hub

The Zerologon exploiter takes advantage of this vulnerability to steal credentials from the domain controller. This allows the Infection Monkey to propagate ...

#23. CVE-2020-1472 - MSRC portal - Microsoft

沒有這個頁面的資訊。

#24. ZeroLogon Vulnerability Monitoring | CyberRes Marketplace

ZeroLogon Vulnerability Monitoring is an Arcsight ESM Package that helps with detecting and monitoring ZeroLogon Vulnerability (CVE-2020-1472).

#25. Zerologon Vulnerability Spurs Rare DHS CISA Emergency ...

Zerologon, the vulnerability CISA alerted about on Friday, attackers who already have any foothold in a data center – say, via a successful ...

#26. Agent-based ZeroLogon Vulnerability Detection - IEEE Xplore

Agent-based ZeroLogon Vulnerability Detection. Abstract: Intrusion detection systems installed on the information security devices that control the internal ...

#27. 【域渗透】- CVE-2020-1472（ZeroLogon）漏洞复现 - 知乎专栏

【域渗透】- CVE-2020-1472（ZeroLogon）漏洞复现. 1 年前· 来自专栏信安文摘. 君行路. ​ 关注. 微信公众号：信安文摘 ...

#28. Image Layer Details - gdwnet/zerologon:latest - Docker Hub

gdwnet/zerologon:latest. Digest:sha256:209ba06109094233ba2c5bc1584d4e768fafc341de8dab70d24a5a23a32e7924. OS/ARCH. linux/amd64. Compressed Size. 137.23 MB.

#29. ZeroLogon漏洞复现(CVE-2020-1472) - 墨天轮

ZeroLogon 漏洞复现(CVE-2020-1472). pen4uin 2021-02-23. 724 ...

#30. Qbot and Zerologon Lead To Full Domain ... - The DFIR Report

Successful exploitation of the Zerologon vulnerability (CVE-2020-1472) allowed the threat actors to obtain domain admin privileges. This level ...

#31. 資安電子報-微軟澄清Zerologon 嚴重漏洞的正確修補方法

日前微軟針對一個近來受到高度注目，可能造成極嚴重攻擊事件的Zerologon 漏洞（CVE-2020-1472）發布更新修補訊息；然而許多用戶感到混淆，也無法確認更新 ...

#32. ZeroLogon – A one-click path to your Domain Admin - Conscia

Surprisingly this vulnerability did not get much attention until just recently, even though it was known for a month now. Help spread the word, ...

#33. One Year Later, a Look Back at Zerologon - Dark Reading

Microsoft's patch for Zerologon arrived in two parts, and its updates modified how Netlogon handles the use of Netlogon secure channels. The fix ...

#34. Detecting Zerologon CVE-2020-1472 Using Exabeam Data ...

Zerologon, also known as CVE-2020-1472, allows an attacker to gain a foothold on an internal Windows network by simply sending a number of ...

#35. Detecting and Preventing Critical ZeroLogon Windows Server ...

Dubbed 'Zerologon' (CVE-2020-1472) and discovered by Tom Tervoort of Secura, the privilege escalation vulnerability exists due to the ...

#36. ZeroLogon exploit detected within 24 hours of vulnerability ...

Within 24 hours, Darktrace AI had detected a cyber-attack on a healthcare company exploiting this very flaw. CVE-2020-1472, or ZeroLogon, is a particularly ...

#37. ZeroLogon(CVE-2020-1472) 分析与狩猎 - 先知社区

2020年9月11日，安全研究员Secura发布了公告，阐明了Microsoft在2020年8月修补的漏洞细节（CVE-2020-1472）。该漏洞也称为“Zerologon”，CVSS评分 ...

#38. Use 'zerologon' (CVE 2020–1417) when the domain controller ...

Zerologon allows an unauthenticated attacker to remotely escalate privileges to a domain administrator. All the attackers needs is network ...

#39. cve-2020-1472 - NVD

http://packetstormsecurity.com/files/160127/Zerologon-Netlogon-Privilege-Escalation.html, Exploit Third Party Advisory VDB Entry.

#40. ZeroLogon to Ransomware - BlackBerry Blog

Following patches released by Microsoft on August 11th, 2020, adversaries are continuing to exploit CVE-2020-1472, known as the ZeroLogon ...

#41. The Zerologon Vulnerability - Cyberteq

It's called Zerologon due to the flaw in the logon process where the initialization ... for the CVE-2020-1472 Netlogon EoP vulnerability, dubbed Zerologon.

#42. How Tanium Can Help Find and Remediate “Zerologon” (CVE ...

CVE-2020-1472 (also known as “Zerologon”) is a vulnerability in the Microsoft Netlogon protocol that is being actively exploited and that ...

#43. Detecting the Zerologon Exploitation (CVE-2020-1472)

QRadar Detecting Zerologon Exploitation QRadar Offense Showing the Detection of Zerologon Exploitation (CVE-2020-1472)

#44. Understanding and Exploiting Zerologon - Safe Security

CVE-2020-1472 dubbed as ZeroLogon is a vulnerability in Microsoft Netlogon. Remote Procedure Call (MS-NRPC) protocol. Specifically, this vulnerability ...

#45. Zerologon Is A Big Deal. Here's Why - Blog - QOMPLX

How does Zerologon work? According to research published by Tom Tervoort of the Dutch security firm Secura, a flaw in the Netlogon protocol ...

#46. Twitter 上的Dirk-jan："So yes, Zerologon (CVE-2020-1472) is ...

So yes, Zerologon (CVE-2020-1472) is quite easy to exploit. Unauthenticated user to Domain Admin. This is really scary.

#47. The story of ZeroLogon | Malwarebytes Labs

ZeroLogon has been successfully weaponized by malware authors, who use it for the lateral infection of corporate endpoints. The sophisticated ...

#48. Are your domain controllers safe from Zerologon attacks?

Are your domain controllers safe from Zerologon attacks? CVE-2020-1472, a privilege elevation vulnerability in the Netlogon Remote Protocol (MS- ...

#49. With Zerologon, attackers can take over your network in about ...

After successful execution of a Zerologon attack, the intruder can disable security features, change passwords, and take over the system. This ...

#50. Detecting the Zerologon vulnerability in LogPoint

Microsoft has released a security advisory for a critical privilege escalation flaw. Detect the Zerologon vulnerability with LogPoint SIEM ...

#51. Redscan Labs Releases Zerologon Detection Tool

Zerologon (CVE-2020-1472) is a critical vulnerability in the Windows Server Netlogon process authentication process. Following our recent ...

#52. CVE-2020-1472 - Zerologon复现+突破445 - redn3ck's blog

没有实际环境，就用本地复现8，跨起个小猫脸.jpg ¶0x02 工具准备下载如下工具https://github.com/risksense/zerologon ...

#53. Zerologon CVE-2020-1472: Technical overview and ...

Zerologon is the name of an elevation of privilege vulnerability in which an attacker establishes a vulnerable Netlogon secure channel ...

#54. Zerologon Privilege Escalation Vulnerability - NHS Digital

Zerologon is a privilege escalation vulnerability in the Netlogon protocol used by Windows DCs. Exploitation of this vulnerability could ...

#55. OT Implications of Energetic Bear's Targeting of Zerologon

The Energetic Bear APT group's exploitation of unpatched Windows Netlogon installations to access Active Directory servers is of interest to ...

#56. Zerologon: Microsoft addressing severe network exploit

Zerologon's name stems from the use of a string of zeros to fill out various fields during a Netlogon connection. "By simply sending a number of ...

#57. ZeroLogon - The Hacker Recipes

Netlogon is a service verifying logon requests, registering, authenticating, and locating domain controllers. MS-NRPC, the Netlogon Remote Protocol RPC ...

#58. Zerologon (CVE-2020-1472) detection, patching and monitoring

CVE-2020-1472 is a Critical security flaw, christened as “Zerologon”, in Windows Domain controllers, along with exploitation, detection and ...

#59. Zerologon Vulnerability: What is it and what you need to know?

Zerologon (CVE-2020-1472) is a critical vulnerability that affects Windows servers. Given certain circumstances, this vulnerability can ...

#60. How to guard against Zerologon and similar vulnerabilities

The Zerologon vulnerability stems from an unreliable cryptographic algorithm in the Netlogon authentication mechanism.

#61. Why Zerologon is the silent threat in your network

This step-by-step PoC shows how attackers use vulnerability chaining to exploit Zerologon and access the Microsoft Domain controller.

#62. Zerologon- CVE-2020-1472 - Vertek

On August 11 th Microsoft published a security advisory for the critical vulnerability CVE-2020-1472, dubbed “Zerologon”.

#63. 讓駭客變成網域管理員！微軟驚爆「Zerologon」重大權限提升 ...

... 漏洞公告的技術報告，該公告揭露Microsoft Netlogon 身分驗證程序中某一CVSS-10 權限提升漏洞，這份技術報告的作者並將它命名為「Zerologon」。

#64. Zerologon Vulnerability: What You Need to Know

Zerologon is a critical vulnerability in the Windows Netlogon Remote Protocol (MS-NRPC) that, when exploited, allows a hacker to impersonate any ...

#65. DHS Issues Dire Patch Warning for 'Zerologon' - Threatpost

... and Infrastructure Security Agency's emergency directive for federal agencies to patch against the so-called 'Zerologon' vulnerability.

#66. Qbot and Zerologon Lead to Full Domain ... - LinkedIn

From there, they were able to successfully exploit the Zerologon vulnerability (CVE-2020-1472), which granted them domain admin privileges and ...

#67. Zerologon - Akamai TechDocs

The Zerologon exploiter exploits CVE-2020-1472.DescriptionAn elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon ...

#68. Zerologon: Bitsight Observations on a Dangerous Vulnerability

What is Zerologon (CVE-2020-1472)?. Zerologon is a vulnerability that affects Windows servers, specifically Domain Controllers. This ...

#69. From Zero to Hero: A ZeroLogon (CVE-2020-1472) Love Story

At the heart of it, ZeroLogon is abusing a flaw in an encryption implementation. The flaw exists in the Netlogon Remote Protocol (MS-NRPC), ...

#70. 一年之后，重新回顾Zerologon漏洞的危害与教训 - 安全内参

漏洞CVE-2020-1472，也被行业称为“Zerologon”，在2020年8月11日（周二）首次发布时的CVSS 评分为8.8。对于特权提升漏洞来说，这个得分很高，但还不足 ...

#71. Zerologon (CVE-2020-1472): Critical Active Directory ...

ZeroLogon : Windows Netlogon Vulnerability CVE-2020-1472; Windows Server Updates against Zerologon; Protecting Active Directory Domain ...

#72. New Zerologon Attack Variants (CVE-2020-1472) Exploitation ...

By Oleg Kolesnikov, Securonix Threat Research Team. Some security experts are calling the new CVSS 10/10 Windows Zerologon EP (ZEP) Vulnerability ...

#73. SentinelOne First to Detect Zerologon (CVE-2020-1472)

CVE-2020-1472, more popularly known as “Zerologon”, is a critical vulnerability in all versions of Microsoft Windows Server that are ...

#74. 為何發生Zerologon漏洞？軟體實作不當 - 捕夢網Blog

在今年9月，有研究人員揭露了Zerologon漏洞，引發關注，這是微軟在8月的修補，是關於Windows Netlogon遠端協定的漏洞。

#75. Tackling the Microsoft Windows Zerologon Vulnerability - CDW

Zerologon is the name given to a security vulnerability found in Microsoft Windows domain controllers by Secura. It is an unauthenticated ...

#76. What is ZeroLogon? How to Detect and Patch - LogRhythm

ZeroLogon is the name for a Microsoft cryptography vulnerability found in CVE-2020-1472 that makes it easy for cybercriminals to hack into ...

#77. Are your Domain Controllers Protected from CVE-2020-1472 ...

Find out about Zerologon, a severe vulnerability in Microsoft's Netlogon authentication process that allows for privilege escalation.

#78. What is Zerologon Vulnerability and How to Patch It? - Action1

Initial deployment of the Zerologon patch to domain controllers. These patches make changes to the Netlogon protocol to protect Windows devices ...

#79. CISA Warns of Hackers Exploiting Zerologon Vulnerability

CISA has warned of attacks targeting the Zerologon vulnerability and it has released a script that helps users identify unpatched domain controllers.

#80. Zerologon and How to Detect It Like A Pro - CYREBRO

Stay ahead of the game with CYREBRO's expert insights on detecting ZeroLogon, a critical vulnerability that threatens Microsoft networks.

#81. Latest Zerologon news - Bleeping Computer

Microsoft now forces secure RPC to block Windows Zerologon attacks · February 10, 2021; 12:56 PM ; Microsoft warns of incoming Windows Zerologon patch enforcement.

#82. Hijacking a Domain Controller with Netlogon RPC (aka ...

The vulnerability, dubbed “Zerologon” (CVE-2020-1472) is a privilege escalation bug with a CVSSv3 score of 10.0 and allows a remote attacker ...

#83. 域提权漏洞系列分析-Zerologon漏洞分析 - 网安

在爆发出CVE-2020-1472 漏洞后，Mimikatz 在2020.09.18 版本中更新了Zerologon 模块，并支持通过Zerologon 漏洞攻击直接域控服务器，但是这种方法想要 ...

#84. Tripwire Industrial Visibility Threat Definition Update Released

Zerologon is a vulnerability that affects the cryptographic authentication mechanism used by the Microsoft Windows Netlogon Remote Protocol (MS- ...

#85. Abusing CVE-2020-1472 (ZeroLogon) - Infinite Logins

Abusing CVE-2020-1472 (ZeroLogon) · Installing Tools. First, we're going to need a few things from GitHub. · Performing the Exploit · Restoring the ...

#86. CVE-2020-1472 (Zerologon) Exploit Detection Cheat Sheet

Since the publication of the Zerologon CVE, threat actors have released different exploitation strategies. Understanding that each strategy ...

#87. 微軟澄清Zerologon 嚴重漏洞的正確修補方法

有鑑於先前提供的CVE-2020-1472 Zerologon 漏洞更新情報的混淆，微軟日前再次發布關於此漏洞的修補方法，以更清楚地方式說明如何修補此嚴重漏洞。

#88. CVE-2020-1472 aka Zerologon - Netscylla

The Zerologon vulnerability allows an attacker with network access to a Windows Domain Controller to quickly and reliably take complete ...

#89. Microsoft CVE-2020-1472: (Zerologon) Netlogon Elevation of ...

Rapid7 Vulnerability & Exploit Database. Microsoft CVE-2020-1472: (Zerologon) Netlogon Elevation of Privilege Vulnerability.

#90. Zerologon (CVE-2020-1472) finding and checking

Zerologon (CVE-2020-1472) finding and checking. In August Microsoft released an Advisory for a vuln in Windows RPC (now dupped Zerologon), ...

#91. Zerologon Windows Server Vulnerability - Avast Blog

A vulnerability named Zerologon has been discovered in Windows domain controllers, taking advantage of the Netlogon Remote Protocol used in ...

#92. ZeroLogon - Netlogon Elevation of Privilege - Exploit Database

ZeroLogon - Netlogon Elevation of Privilege. CVE-2020-1472 . remote exploit for Windows platform.

#93. 「盡快修復」的Windows伺服器Zerologon漏洞

美國國土安全部最近責令政府機構的所有網路管理員，立即給Windows Server 2008 及以上版本（包括Windows 10 Server）進行安全更新。被稱為「Zerologon ...

#94. Microsoft Issues Updated Patching Directions for 'Zerologon'

The Zerologon vulnerability affects Windows Server's Netlogon Remote Protocol, or MS-NRPC - an authentication component of Active Directory that ...

#95. Detecting Zerologon attacks - Splunk Lantern

Detect activities relating to the Zerologon CVE-2020-11472, with Splunk searches you can use to identify attempts to reset the Domain ...

#96. CVE-2020-1472 – Windows Microsoft “Zerologon” or ...

On September 11, 2020 Secura, a digital security advisor company discovered and announced the Microsoft “Zerologon” or “NetLogon” ...

#97. A different way of abusing Zerologon (CVE-2020-1472)

In August 2020, Microsoft patched CVE-2020-1472 aka Zerologon. This is in my opinion one of the most critical Active Directory ...

#98. ZeroLogon(CVE-2020-1472) 漏洞的攻击与防御策略（下）

这两者都可以被利用，因为Zerologon允许攻击者更改计算机帐户密码。 一旦攻击者可以访问计算机帐户密码哈希，该帐户就可以用作“用户”帐户来查询Active ...

#99. Takeaways from Zerologon: The Latest Domain Controller Attack

In response to rising concerns about the notorious Zerologon vulnerability (CVE-2020-1472), the U.S. Cybersecurity and Infrastructure ...