🔑 Onelogon: Taking over Active Directory Accounts via Netlogon

We analyzed Netlogon, bypassed the Zerologon patch, resulting in a full auth bypass. An attacker can leverage this to compromise computer accounts, or even the entire AD. Non-standard config must be present tho

Exploit: https://github.com/rub-softsec/onelogon
https://github.com/Pennyw0rth/NetExec/pull/1291

From: https://x.com/al3x_n3ff/status/2069482623672435049?s=46