CVE-2020-0796 PoC — 微软 Microsoft SMBv3 缓冲区错误漏洞

Source

https://github.com/ButrintKomoni/cve-2020-0796

Associated Vulnerability

Title:微软 Microsoft SMBv3 缓冲区错误漏洞 (CVE-2020-0796)
Description:A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Description

Identifying and Mitigating the CVE-2020–0796 flaw in the fly

Readme

# Identifying and Mitigating the CVE-2020–0796 flaw in the fly
CVE-2020–0796, is pre-remote code execution vulnerability that resides in the Server Message Block 3.0 (SMBv3) network communication protocol, which Microsoft will not address the issue as the part of the March 2020 Tuesday.

## Usage
`python3 cve-2020-0796-scanner.py IP`

## Which devices does the CVE-2020-0796 affect?
![Affected Devices](https://miro.medium.com/max/746/1*SrDVddRM9EgS4X7DCmNIwA.png)

## Packet request negotiate on the SMB protocol 
![packet dump](https://i.imgur.com/PVYrR5w.png)



For further information on the vulnerability how to mitigate it check the post of mine in; https://medium.com/@butrintkomoni/identifying-and-mitigating-the-cve-2020-0796-flaw-in-the-fly-7f2404ebe979

File Snapshot


 [4.0K]  /data/pocs/1be20638726565caadf7a3bb2635b5c05159699a
├── [1.1K]  cve-2020-0796-scanner.py
└── [ 773]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!