CVE-2020-0796 PoC — 微软 Microsoft SMBv3 缓冲区错误漏洞

Source

https://github.com/dickens88/cve-2020-0796-scanner

Associated Vulnerability

Title:微软 Microsoft SMBv3 缓冲区错误漏洞 (CVE-2020-0796)
Description:A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Description

This project is used for scanning cve-2020-0796 SMB vulnerability

Readme

# cve-2020-0796-scanner
This project is base on [SMBGhost](https://github.com/ollypwn/SMBGhost) which is used for scanning CVE-2020-0796 - SMBv3 RCE vulnerability. only add batch scanning function.

# Usage
```
python3 cve-2020-0796-scanner.py -t <IP/MASK>
```

# Workarounds
```
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" DisableCompression -Type DWORD -Value 1 -Force
```
> This project(https://github.com/T13nn3s/CVE-2020-0976) provide a auto script to mitigate the risk which will be easier for endpoint user to implement.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!