CVE-2017-8759 PoC — Microsoft .NET Framework 安全漏洞

Source

https://github.com/vysecurity/CVE-2017-8759

Associated Vulnerability

Title:Microsoft .NET Framework 安全漏洞 (CVE-2017-8759)
Description:Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."

Description

CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.

Readme

CVE-2017-8759 Weaponisation PoC
===============================

This repository contains data that can be used to weaponise the CVE-2017-8759 vulnerability. 

For full information visit https://www.mdsec.co.uk/blog/ to find the post related to this vulnerability.

As always, my research is aimed to help the community become more aware of rising threats as well as the adversary simulation community to better simulate realistic threats against our client base in order to better educate and inform them. My research should not be used against a target without prior consent.

Video for weaponisation can be found at https://www.youtube.com/watch?v=hlkx5uYBT1Y

Credits
=======
Credits to myself, Vincent Yiu @vysecurity for the weaponisation in RTF form with no interaction required.
Credits to @voulnet for the exploit.txt.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!