CVE-2020-0796

CVE-2020-0796 概述： SMBv3从Windows 10/Server版本1903开始添加的压缩功能存在整数溢出漏洞，微软于2020年3月12日确认。攻击者可以利用该漏洞实现本地权限提升（LPE）和远程代码执行（RCE）。此处仅讨论LPE漏洞。 受影响版本 ： Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows Server, version...

CVE-2020-0796-BOF

这是Raphael对SMBGhost LPE的尝试。 我从Metasploit框架的源代码开始： cve-2020-0796: SMBv3压缩缓冲区溢出 SMBGhost CVE 2020-0796 https://github.com/rapid7/metasploit-framework/tree/master/external/source/exploits/CVE-2020-0796 BSD许可 然后，我做了以下工作： 1. 我将反射型DLL转换为Cobalt Strike 4.1的Beacon对象文件。 这需要以Dynamic Function...

CVE-2020-0796

警告 此仓库已归档，不再积极维护。 CVE-2020-0796 PowerShell SMBv3 压缩检查器 相关博客文章：https://binsec.nl/cve-2020-0796-smbv3-rce-vulnerebility-in-smbv3-coronablue/ 目前为止，此漏洞仅影响以下操作系统： Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems...

SMBCompScan

SMBCompScan Script de escaneo para identificar hosts vulnerables a CVE-2020-0796 Aviso Aviso legal Este script puede ayudar a identificar máquinas con la vulnerabilidad SMBv3 comprobando si la compresión está habilitada. Aún así, podría devolver 'vulnerable' para máquinas que tengan instalado...

CVE-2020-0796 - SMBGhost

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 SMBv3 protocol handles certain requests, aka ‘Windows SMBv3 Client/Server Remote Code Execution Vulnerability’. Recent assessments: jorgeorchilles at March 11, 2020 1:19pm UTC reported: Summary...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

Warning This repository has been archived and is no long...