Post #967 47 Sep 24, 2020, 21:24 UTC A different way of abusing Zerologon (CVE-2020-1472)https://dirkjanm.io/a-different-way-of-abusing-zerologon/ dirkjanm.io A different way of abusing Zerologon (CVE-2020-1472) In August 2020, Microsoft patched CVE-2020-1472 aka Zerologon. This is in my opinion one of the most critical Active Directory vulnerabilities of the past few years, since it allows for instant escalation to Domain Admin without credentials. The most straightforward…