CVE-2020-1206

Trong lỗ hỏng SMBGhost (CVE-2020-0796) tôi đã nói về một kĩ thuật write-what-where primitive thông qua việc sử dụng bug overflow integer để thay đổi con trỏ AllocUserbuffer trỏ đến một địa chỉ mà ta mong muốn và ghi dữ liệu tùy ý vào đó Tương tự như SMB Ghost,

CVE-2020-0796 Remote Code Execution POC (c) 2020 ZecOps, Inc - wwwzecopscom - Find Attackers' Mistakes Remote Code Execution POC for CVE-2020-0796 / "SMBGhost" Expected outcome: Reverse shell with system access Intended only for educational and testing in corporate environments ZecOps takes no responsibility for the code, use at your own risk Please

CVE-2020-0796 Remote Code Execution POC (c) 2020 ZecOps, Inc - wwwzecopscom - Find Attackers' Mistakes Remote Code Execution POC for CVE-2020-0796 / "SMBGhost" Expected outcome: Reverse shell with system access Intended only for educational and testing in corporate environments ZecOps takes no responsibility for the code, use at your own risk Please

SMBaloo A CVE-2020-0796 (aka "SMBGhost") exploit for Windows ARM64 Because vulnerabilities and exploits don't need to always have scary names and logos GitHub Repository: wwwgithubcom/msuiche/smbaloo Original post on Comae's blog: wwwcomaecom/posts/2020-07-01_smbaloo-building-a-rce-exploit-for-windows-arm64-smbghost-edition/ Author: M

SMBGhost (CVE-2020-0796) and SMBleed (CVE-2020-1206) Scanner

SMBGhost (CVE-2020-0796) and SMBleed (CVE-2020-1206) Scanner (c) 2020 ZecOps, Inc - wwwzecopscom - Find Attackers' Mistakes Intended only for educational and testing in corporate environments ZecOps takes no responsibility for the code, use at your own risk Please contact sales@ZecOpscom if you are interested in agent-less DFIR tools for Servers, Endpoints, a

CVE-2020-0796 Remote Code Execution POC

CVE-2020-0796 Remote Code Execution POC (c) 2020 ZecOps, Inc - wwwzecopscom - Find Attackers' Mistakes Remote Code Execution POC for CVE-2020-0796 / "SMBGhost" Expected outcome: Reverse shell with system access Intended only for educational and testing in corporate environments ZecOps takes no responsibility for the code, use at your own risk Please

CVE-2020-1206 Uninitialized Kernel Memory Read POC

CVE-2020-1206 Uninitialized Kernel Memory Read POC (c) 2020 ZecOps, Inc - wwwzecopscom - Find Attackers' Mistakes POC to check for CVE-2020-1206 / "SMBleed" Expected outcome: Local file containing target computer kernel memory Intended only for educational and testing in corporate environments ZecOps takes no responsibility for the code, use at your