CVE-2020-1350 PoC — Microsoft Windows DNS Server 输入验证错误漏洞

Source

https://github.com/gdwnet/cve-2020-1350

Associated Vulnerability

Title:Microsoft Windows DNS Server 输入验证错误漏洞 (CVE-2020-1350)
Description:A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

Description

A powershell script to deploy the registry mitigation key for CVE-2020-1350

Readme

This is a powershell script that'll grab all the AD servers for the domain your computer is on. It'll then set the CVE 2020-1350 DNS workaround on those servers and restart DNS.

NOTE!! it will restart DNS so you might need a maintenance window to run it. This workaround does not mean that you can avoid patching your servers but it should help buy you some time especially if you have windows servers on the internet.

You can read about cve-2020-1350 here -> https://blog.gdwnet.com/2020/07/15/sigred-dns-flaw-summary/

Questions? Issues? Suggestions? contact@gdwnet.com
Useful? If so, why not buy me a coffee to say thanks? https://www.buymeacoffee.com/garyw

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!