Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Zerologon restore password: add details in configuration #989

Closed
shreyamalviya opened this issue Feb 24, 2021 · 0 comments · Fixed by #998
Closed

Zerologon restore password: add details in configuration #989

shreyamalviya opened this issue Feb 24, 2021 · 0 comments · Fixed by #998
Labels
Complexity: Low Documentation Issues relating to the project's documentation like readme files, guides, etc. Enhancement Issue that describes an enhancement to a current feature. Impact: High

Comments

@shreyamalviya
Copy link
Contributor

Is your feature request related to a problem? Please describe.
The Zerologon exploiter may exploit a system successfully (which includes changing the domain controller (DC) password) but fail to restore the original password.

Describe the solution you'd like
To clearly communicate to the user about this scenario and what to do in it:

  1. We should update our documentation, giving clear steps on how to restore the password.
  2. We should add details to the exploiter description on the configuration page about the risks, and link it to the documentation page.

Describe alternatives you've considered
NA
@shreyamalviya shreyamalviya added Enhancement Issue that describes an enhancement to a current feature. Island Documentation Issues relating to the project's documentation like readme files, guides, etc. Impact: High Complexity: Low labels Feb 24, 2021
@shreyamalviya shreyamalviya mentioned this issue Feb 24, 2021
Closed
@VakarisZ VakarisZ mentioned this issue Feb 25, 2021
Merged
3 tasks
@VakarisZ VakarisZ removed the Island label Feb 25, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Complexity: Low Documentation Issues relating to the project's documentation like readme files, guides, etc. Enhancement Issue that describes an enhancement to a current feature. Impact: High
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Zerologon password reset warning guardicore/monkey
2 participants
@VakarisZ @shreyamalviya