BlueGate

BlueGate PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610. Thanks to ollypwn for pointing out my silly mistake! Setup I'm using a patched version of pydtls as the original repository wouldn't build properly. root@kitploit: cd pydtls sudo python setup.py install...

rdg_scanner_cve-2020-0609

Scanning for Remote Desktop Gateways Potentially unpatched CVE-2020-0609 and CVE-2020-0610 The scanner has 2 modes of operation: Check for systems vulnerable to CVE-2020-0609 on UDP 3391 Uses the vuln scan code of https://github.com/MalwareTech/RDGScanner Disclaimer Scanning for memory corruption...

BlueGate-CVE-2020-0609

RD Gateway BlueGate Validator CVE-2020-0609 / CVE-2020-0610 Remote Validation Tool A small check-only Python utility for remotely validating the patch behavior associated with the Microsoft Remote Desktop Gateway vulnerabilities: CVE-2020-0609 CVE-2020-0610 The vulnerabilities, commonly associate...

BlueGate

BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...

RDGScanner

Scanner for CVE-2020-0609 & CVE-2020-0610 A proof-of-concept scanner to check an RDP Gateway Server for vulnerabilities CVE-2020-0609 & CVE-2020-0610. Tested on: Windows Server 2012 x64 Windows Server 2016 x64 Windows Server 2019 x64 Disclaimer Scanning for memory corruption vulnerabilities is...

Microsoft Remote Desktop Gateway Multiple RCE Vulnerabilities (uncredentialed check)

Binary data microsoftrdgatewayrce.nbin...

CVE-2020-0610

creationtimestamp| type| source ---|---|--- 2020-01-15 01:02:21+00:00| seen| https://t.me/N0iSeBit/365 2020-01-15 08:34:29+00:00| seen| https://t.me/cybershit/653 2020-01-24 09:03:43+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6269 2020-01-24 20:54:26+00:00|...

Microsoft Windows Multiple Vulnerabilities (KB4534273)

This host is missing a critical security update according to Microsoft KB4534273 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Remote code execution

A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway RD Gateway Remote Code Execution Vulnerability'. This CVE ID...

CVE-2020-0610

CVE-2020-0610 is a Windows RD Gateway vulnerability (BlueGate) that enables unauthenticated remote code execution over UDP/3391. The RD Gateway role with UDP transport enabled is affected; exploitation targets the gateway service via specially crafted UDP traffic, enabling full compromise (per th...

Microsoft Windows Remote Desktop Protocol CVE-2020-0610 Remote Code Execution Vulnerability

Description Microsoft Windows Remote Desktop Protocol is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Technologies...

VulnCheck KEV: CVE-2020-0610

A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway RD Gateway Remote Code Execution Vulnerability'. This...

KB4534273: Windows 10 Version 1809 and Windows Server 2019 January 2020 Security Update

The remote Windows host is missing security update 4534273. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends...