netlogon

Netlogon and CLDAP vulnerability research with a proof of concept.

Go client library for Windows MS-RPC and DCOM: DCE/RPC v5, NDR/NDR64, Kerberos/NTLM/SPNEGO, SMB2, and generated stubs for 100+ Windows protocols

CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.

CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports whether a domain controller's domain is long enough to crash, without sending the overflow. The binary-verified analysis the public PoCs got wrong.

Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.

Protect your domain controllers against Zerologon (CVE-2020-1472).

Correct, spec-compliant Active Directory password change, reset, and policy read over SAMR, Netlogon, LSA, Kerberos, and LDAP - including the AES paths impacket lacks.

Guarded Samba AD DC lab on Ubuntu 24.04 with DNS, Kerberos, signed time, verification, backup, and recovery runbooks.

PowerShell module for troubleshooting Netlogon issues including event log parsing, debug logging, and secure channel diagnostics.

C++ Netlogon secure channel validator for Zerologon mitigation

Provision a Samba Active Directory Domain Controller on Ubuntu 24.04 with automated scripts for easy setup and internal DNS configuration.