CVE-2020-0796-BOF

This is Raphael's tinkering around with the SMBGhost LPE. I started with the source code from the Metasploit Framework: cve-2020-0796: SMBv3 Compression Buffer Overflow SMBGhost CVE 2020-0796 https://github.com/rapid7/metasploit-framework/tree/master/external/source/exploits/CVE-2020-0796 BSD...

CVE-2020-0796

CVE-2020-0796 Overview: The compression feature added to SMBv3 starting from Windows 10/Server version 1903 contains an integer overflow vulnerability confirmed by Microsoft on 12/03/2020. It allows an attacker to perform Local Privilege Escalation LPE and Remote Code Execution RCE. Here we will...

CVE-2020-0796

Warning This repository has been archived and is no longer actively maintained. CVE-2020-0796 Powershell SMBv3 Compression checker Related blog post: https://binsec.nl/cve-2020-0796-smbv3-rce-vulnerebility-in-smbv3-coronablue/ This vulnerability has so far only applied to the following operating...

SMBCompScan

SMBCompScan Scanner script to identify hosts vulnerable to CVE-2020-0796 Advisory Disclaimer This script can help to identify machines with the SMBv3 vulnerablity by checking for enabled compression. Still, it might return "vulnerable" for machines which have KB4551762 installed. Requirements Per...

CVE-2020-0796 - SMBGhost

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 SMBv3 protocol handles certain requests, aka ‘Windows SMBv3 Client/Server Remote Code Execution Vulnerability’. Recent assessments: jorgeorchilles at March 11, 2020 1:19pm UTC reported: Summary...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

Warning This repository has been archived and is no long...