9 matches found
eternalghosttest
Eternalghost AlemĂĄn InglĂŠs AlemĂĄn Este repositorio contiene un caso de prueba para CVE-2020-0796 Con este pequeĂąo script puede comprobar si uno de sus servidores es vulnerable. El script comprueba si tiene la compresiĂłn activada y si la versiĂłn de SMB es 3.1.1. Todo esto se realiza mediante una...
CVE-2020-1206
En la vulnerabilidad SMBGhost CVE-2020-0796 hablĂŠ sobre una tĂŠcnica de primitiva write-what-where mediante el uso de una vulnerabilidad de desbordamiento de enteros para cambiar el puntero Alloc.Userbuffer para que apunte a una direcciĂłn deseada y escribir datos arbitrarios en ella. Al igual que...
SMBGhost
SMBGhost Este repositorio contiene mi script de escĂĄner que te permite saber si tu servidor usa SMBv3.1.1 y tiene la compresiĂłn SMB habilitada. En Ăşltima instancia, esto significa que eres vulnerable a CVE-2020-0796. En este momento se publicĂł un parche de seguridad, ÂĄasegĂşrate de actualizar!...
CVE-2020-0796-Scanner
Inspirado por el script SMBGhost de ollypwn, escribĂ mi propio script y lo compartĂ. root@kitploit: import socket import binascii import sys payload =...
DisableSMBCompression
DisableSMBCompression CVE-2020-0796 Flaw Mitigation - Active Directory Administrative Templates The little we know about the new SMB3 flaw, is that we've been provided this mitigation for SMB3 servers: root@kitploit: Set-ItemProperty -Path...
CVE_2020_0796_CNA
CVE-2020-0796-CNA Modified based on the PoC provided by danigargu, implemented privilege escalation replication on Windows 10, and developed AggressorScripts based on the Reflective DLL project by stephenfewer and the interface provided by CobaltStrike documentation. This repository is only for...
August 16, 2022âKB5016693 (OS Build 20348.946) Preview
None None...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
CVE-2020-0796-CNA This implementation is based on the POC pro...
Critical Patch Released for 'Wormable' SMBv3 Vulnerability â Install It ASAP!
Microsoft today finally released an emergency software update to patch the recently disclosed very dangerous vulnerability in SMBv3 protocol that could let attackers launch wormable malware, which can propagate itself from one vulnerable computer to another automatically. The vulnerability, track...