CVE-2020-0609 PoC — 微软 Microsoft Windows 输入验证错误漏洞

Source

https://github.com/Archi73ct/CVE-2020-0609

Associated Vulnerability

Title:微软 Microsoft Windows 输入验证错误漏洞 (CVE-2020-0609)
Description:A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.

Readme

# CVE-2020-609-POC

Running the PoC against a RDG server with UDP open on port 3391, will cause the RDG instance to crash.

Thanks to @Ollypwn for sparring during development.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →