CVE-2020-0796 PoC — 微软 Microsoft SMBv3 缓冲区错误漏洞

Source

https://github.com/kn6869610/CVE-2020-0796

Associated Vulnerability

Title:微软 Microsoft SMBv3 缓冲区错误漏洞 (CVE-2020-0796)
Description:A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Readme

# CVE-2020-0796

# SMBGhost (from ollypwn)
Simple scanner for CVE-2020-0796 - SMBv3 RCE.

The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. 

It checks for SMB dialect 3.1.1 and compression capability through a negotiate request.

A network dump of the scanner running against a Windows 2019 Server (10.0.0.133) can be found under `SMBGhost.pcap`. 

# Scan
`python3 CVE-2020-0796_Scan_Vul.py <IP>`

# How to protect your computer
You can disable compression to block unauthenticate attackers from exploiting the vulnerability against an SMBv3 Server with the PowerShell command below.
```
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" DisableCompression -Type DWORD -Value 1 -Force
```

File Snapshot


 [4.0K]  /data/pocs/703b0194bc0ece0f7192958cf985924dd2fbda80
├── [1.1K]  CVE-2020-0796_Scan_Vul.py
├── [ 452]  CVE-2020-0796_test.sh
├── [ 823]  README.md
└── [1.4K]  SMBGhost.pcap

0 directories, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!