voidsec / cve-2020-1472 Goto Github PK
View Code? Open in Web Editor NEWExploit Code for CVE-2020-1472 aka Zerologon
Home Page: https://voidsec.com
Exploit Code for CVE-2020-1472 aka Zerologon
Home Page: https://voidsec.com
With the latest impacket version:
[-] Do you want to continue and exploit the Zerologon vulnerability? [N]/y
y
Traceback (most recent call last):
File "cve-2020-1472-exploit.py", line 155, in
main()
File "cve-2020-1472-exploit.py", line 28, in main
perform_attack("\\" + dc_name, dc_ip, dc_name)
File "cve-2020-1472-exploit.py", line 136, in perform_attack
result = try_zerologon(dc_handle, rpc_con, target_computer)
File "cve-2020-1472-exploit.py", line 103, in try_zerologon
request = nrpc.NetrServerPasswordSet2()
AttributeError: module 'impacket.dcerpc.v5.nrpc' has no attribute 'NetrServerPasswordSet2'
What means during install procedures?
pwd
~/impacket/
HI there,
This is what i get with the:
pip install .
ERROR: Failed building wheel for cryptography
Successfully built impacket
Failed to build cryptography
ERROR: Could not build wheels for cryptography which use PEP 517 and cannot be installed directly
On Kali last release with python 3.8.6 and pyfiglet installed with both pip and apt-get:
Traceback (most recent call last):
File "cve-2020-1472-exploit.py", line 155, in
main()
File "cve-2020-1472-exploit.py", line 28, in main
perform_attack("\\" + dc_name, dc_ip, dc_name)
File "cve-2020-1472-exploit.py", line 117, in perform_attack
banner = pyfiglet.figlet_format("Zerologon", "doom")
File "/usr/lib/python3/dist-packages/pyfiglet/init.py", line 65, in figlet_format
fig = Figlet(font, **kwargs)
File "/usr/lib/python3/dist-packages/pyfiglet/init.py", line 794, in init
self.setFont()
File "/usr/lib/python3/dist-packages/pyfiglet/init.py", line 801, in setFont
self.Font = FigletFont(font=self.font)
File "/usr/lib/python3/dist-packages/pyfiglet/init.py", line 126, in init
self.data = self.preloadFont(font)
File "/usr/lib/python3/dist-packages/pyfiglet/init.py", line 147, in preloadFont
raise FontNotFound(font)
pyfiglet.FontNotFound: doom
(impacket) [ blackarch ~/impacket/examples/CVE-2020-1472 ]# ./cve-2020-1472-exploit.py -n WIN-279U4IB3LJE -t ...
|___ / | |
/ / ___ _ __ ___ | | ___ __ _ ___ _ __
/ / / _ \ '/ _ | |/ _ \ / ` |/ _ | ' \
./ /| / | | () | | () | (| | () | | | |
_____/_|| ___/||_/ __, |_/|| ||
/ |
|_/
Checker & Exploit by VoidSec
Performing authentication attempts...
Traceback (most recent call last):
File "/root/impacket/impacket/lib/python3.8/site-packages/impacket/dcerpc/v5/transport.py", line 346, in connect
self.__socket.connect(sa)
socket.timeout: timed out
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "./cve-2020-1472-exploit.py", line 155, in
main()
File "./cve-2020-1472-exploit.py", line 28, in main
perform_attack("\\" + dc_name, dc_ip, dc_name)
File "./cve-2020-1472-exploit.py", line 124, in perform_attack
rpc_con = try_zero_authenticate(dc_handle, dc_ip, target_computer)
File "./cve-2020-1472-exploit.py", line 37, in try_zero_authenticate
binding = epm.hept_map(dc_ip, nrpc.MSRPC_UUID_NRPC, protocol="ncacn_ip_tcp")
File "/root/impacket/impacket/lib/python3.8/site-packages/impacket/dcerpc/v5/epm.py", line 1256, in hept_map
dce.connect()
File "/root/impacket/impacket/lib/python3.8/site-packages/impacket/dcerpc/v5/rpcrt.py", line 801, in connect
return self._transport.connect()
File "/root/impacket/impacket/lib/python3.8/site-packages/impacket/dcerpc/v5/transport.py", line 349, in connect
raise DCERPCException("Could not connect: %s" % msg)
impacket.dcerpc.v5.rpcrt.DCERPCException: Could not connect: timed out
(impacket) [ blackarch ~/impacket/examples/CVE-2020-1472 ]#
Hi there, I am getting the following error: (how do i fix this?)
raceback (most recent call last):
File "./cve-2020-1472-exploit.py", line 155, in
main()
File "./cve-2020-1472-exploit.py", line 28, in main
perform_attack("\\" + dc_name, dc_ip, dc_name)
File "./cve-2020-1472-exploit.py", line 117, in perform_attack
banner = pyfiglet.figlet_format("Zerologon", "doom")
File "/usr/lib/python3/dist-packages/pyfiglet/init.py", line 65, in figlet_format
fig = Figlet(font, **kwargs)
File "/usr/lib/python3/dist-packages/pyfiglet/init.py", line 794, in init
self.setFont()
File "/usr/lib/python3/dist-packages/pyfiglet/init.py", line 801, in setFont
self.Font = FigletFont(font=self.font)
File "/usr/lib/python3/dist-packages/pyfiglet/init.py", line 126, in init
self.data = self.preloadFont(font)
File "/usr/lib/python3/dist-packages/pyfiglet/init.py", line 147, in preloadFont
raise FontNotFound(font)
pyfiglet.FontNotFound: doom
many thanks.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.