Research

Writeups are published only once a finding is public. Active reports stay at vendor, severity and status, with no exploitable detail.

Vocational school

2026-03-03

Domain compromise via ZeroLogon, and helping fix it

I found the domain controller of the vocational school I attended exposed to ZeroLogon (CVE-2020-1472), demonstrated impact responsibly, reported it immediately, and worked with the school to remediate and harden the infrastructure.

Disclosed & remediated

CVSS 10.0 (Critical)