CVE-2020-0609 PoC — 微软 Microsoft Windows 输入验证错误漏洞

Source

https://github.com/Archi73ct/CVE-2020-0609

Associated Vulnerability

Title:微软 Microsoft Windows 输入验证错误漏洞 (CVE-2020-0609)
Description:Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。 Microsoft Windows Remote Desktop Gateway (RD Gateway)中存在远程代码执行漏洞。攻击者可通过使用RDP连接到目标系统并发送特制的请求利用该漏洞在目标系统上执行任意代码。以下产品及版本受到影响：Microsoft Windows Server 2012，Windows Server 2012 R2，Windows Server 2016，Windows Se

Readme

# CVE-2020-609-POC

Running the PoC against a RDG server with UDP open on port 3391, will cause the RDG instance to crash.

Thanks to @Ollypwn for sparring during development.

File Snapshot


 [4.0K]  /data/pocs/2a383d8b7916a20965a60cb8bd16247949890fb4
├── [1.4K]  CVE-2020-0609.sln
├── [4.0K]  RDG_POC
│   ├── [2.6K]  CVE-2020-0609.cpp
│   ├── [ 424]  Header.h
│   ├── [8.1K]  RDG_POC.vcxproj
│   ├── [1.0K]  RDG_POC.vcxproj.filters
│   └── [ 165]  RDG_POC.vcxproj.user
├── [ 176]  README.md
└── [4.0K]  Release
    ├── [ 10K]  CVE-2020-0609.exe
    ├── [ 30K]  CVE-2020-0609.iobj
    ├── [ 18K]  CVE-2020-0609.ipdb
    └── [460K]  CVE-2020-0609.pdb

2 directories, 11 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!