CVE-2020-16898 PoC — Windows TCP/IP Remote Code Execution Vulnerability

Source

https://github.com/ZephrFish/CVE-2020-16898

Associated Vulnerability

Title:Windows TCP/IP Remote Code Execution Vulnerability (CVE-2020-16898)
Description:A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer. The update addresses the vulnerability by correcting how the Windows TCP/IP stack handles ICMPv6 Router Advertisement packets.

Description

HoneyPoC 2.0: Proof-of-Concept (PoC) script to exploit IPv6 (CVE-2020-16898).

Readme

# This is an educational exercise. Use at your own risk.

# CVE-2020-16898 Exploit 

### Windows Binary PoC
```
./CVE-2020-16898.exe -t <target host> -u <target user> will run the exploit.
./CVE-2020-16898.exe -t 10.10.10.1 -u Administrator
```
- [See my other exploits here](https://github.com/ZephrFish/CVE-2020-1350)
## [This is a lesson as to why you should not trust binaries on the internet.](https://blog.zsec.uk/cve-2020-1350-research/)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!