关联漏洞
标题：
微软 Microsoft SMBv3 缓冲区错误漏洞
(CVE-2020-0796)
描述：Microsoft SMBv3是美国微软（Microsoft）公司的一个为设备提供SMB功能的支持固件。 Microsoft Server Message Block 3.1.1 (SMBv3)版本中存在缓冲区错误漏洞，该漏洞源于SMBv3协议在处理恶意压缩数据包时，进入了错误流程。远程未经身份验证的攻击者可利用该漏洞在应用程序中执行任意代码。以下产品及版本受到影响：Microsoft Windows 10版本1903，Windows Server版本1903，Windows 10版本1909，Windo
描述
CVE-2020-0796 Local Privilege Escalation POC
介绍
# CVE-2020-0796 Local Privilege Escalation POC
(c) 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes
POC to check for CVE-2020-0796 / "SMBGhost"
Expected outcome: cmd.exe launched with system access
Intended only for educational and testing in corporate environments.
ZecOps takes no responsibility for the code, use at your own risk.
Please contact sales@ZecOps.com if you are interested in agent-less DFIR tools for Servers, Endpoints, and Mobile Devices to detect SMBGhost and other types of attacks automatically.
## Usage
Make sure Python is installed, then run `poc.py`.
## References
* [Exploiting SMBGhost (CVE-2020-0796) for a Local Privilege Escalation: Writeup + POC - ZecOps Blog](https://blog.zecops.com/vulnerabilities/exploiting-smbghost-cve-2020-0796-for-a-local-privilege-escalation-writeup-and-poc/)
* [Vulnerability Reproduction: CVE-2020-0796 POC - ZecOps Blog](https://blog.zecops.com/vulnerabilities/vulnerability-reproduction-cve-2020-0796-poc/)
* [CVE-2020-0796 - Microsoft Security Response Center](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796)
文件快照
[4.0K] /data/pocs/72c42eda58fb49242422fa05d68e16b5ed6a9aa5
├── [170K] demo.gif
├── [574K] Injector.exe
├── [4.5K] poc.py
├── [1.1K] README.md
├── [ 89K] spawn_cmd.dll
├── [4.0K] spawn_cmd_src
│ ├── [1.5K] dllmain.cpp
│ ├── [ 149] framework.h
│ ├── [ 186] pch.cpp
│ ├── [ 563] pch.h
│ ├── [1.4K] spawn_cmd.sln
│ ├── [8.3K] spawn_cmd.vcxproj
│ └── [1.2K] spawn_cmd.vcxproj.filters
└── [7.4K] write_what_where.py
1 directory, 13 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。