Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

zerologon_exploit.py

Credential Abuse

AD Misconfigurations

Lateral Movement

Authorized-lab PoC for CVE-2020-1472: exploit vulnerable Netlogon on a domain controller to set its Active Directory machine-account password to an empty string. DCSync is a separate follow-on action. The password change disrupts the DC's secure-channel communication; promptly restore the original machine-account password using the separate restorepassword.py helper.

Source

https://github.com/dirkjanm/CVE-2020-1472/tree/6860f23e015580ef3dcd168a1e1af61579342455

Language

Python

References

github.com github.com github.com support.microsoft.com microsoft.com

+2 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER