NetExec Zerologon Check (CVE-2020-1472)

Non-destructive check for the Netlogon CVE-2020-1472 (Zerologon) vulnerability against a domain controller. Does not actually reset the machine account — use the standalone exploit if you intend to.

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Tool

nxc

Category

Enumeration / SMB

Platform

linux

Requires

no credentials

Protocols

SMB, RPC

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

nxc smb <dc-ip> -u '' -p '' -M zerologon

Examples

nxc smb 10.10.10.10 -u '' -p '' -M zerologon

Tags

netexec nxc zerologon cve-2020-1472 vulnerability-check

References

• Zerologon advisory

Related commands

• Enum4linux-ng SMB Enumeration Next generation enum4linux for SMB enumeration
• Impacket lookupsid Brute-force the RID space against SAMR / LSARPC to enumerate domain users, groups, and…
• Impacket NetView Enumerate logged-on users and sessions on remote hosts
• Impacket SAMRDump Dump user accounts and group information via SAMR protocol
• Impacket SMBClient Interactive SMB client written in pure Python. Drops you into a shell with shares, ls,…
• NetExec enum_ca Module Discover Active Directory Certificate Services CA hosts on the network and grab basic CA…
• NetExec MS17-010 Check (EternalBlue) Detect MS17-010 (EternalBlue) vulnerable hosts via the SMBv1 transaction probe. Safe…
• NetExec Password Policy Enumerate Domain Password Policy