dirkjanm/CVE-2020-1472

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1320 stars · 281 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A proof-of-concept exploit for CVE-2020-1472 (Zerologon), a critical Netlogon privilege escalation vulnerability in Windows domain controllers. It resets the domain controller machine account password to enable DCSync attacks, and includes a script to restore the original password.

Use cases

• test domain controller for zerologon vulnerability
• exploit cve-2020-1472 in a lab
• dcsync domain admin credentials via zerologon
• restore domain controller machine account password after exploit
• learn how the zerologon attack works

When to choose

• you need a working PoC for CVE-2020-1472 in an authorized penetration test or lab
• you want to demonstrate the impact of Zerologon on a domain controller
• you need to restore a DC machine account password after exploitation

When to avoid

• you need a polished, maintained security tool rather than a research PoC
• you cannot safely handle the side effect of resetting the DC machine account password
• you lack explicit authorization to test the target domain controller

Facets

cli-tool · maturity maintenance

penetration-testing security security penetration-testing python cli zerologon cve-2020-1472 exploit poc active-directory domain-controller impacket dcsync linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dirkjanm/CVE-2020-1472")