CVE-2020-0796 PoC — 微软 Microsoft SMBv3 缓冲区错误漏洞

Source

https://github.com/5l1v3r1/CVE-2020-0796-PoC-and-Scan

Associated Vulnerability

Title:微软 Microsoft SMBv3 缓冲区错误漏洞 (CVE-2020-0796)
Description:A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Description

Lightweight PoC and Scanner for CVE-2020-0796 without authentication.

Readme

# CVE-2020-0796-PoC-and-Scan

An even more simple PoC and Scanner for CVE-2020-0796, as it uses static packets. There is a protection to prevent accidental usage on public IPs (don't do that) and an on/off switch to flick crashing. Only requires vanilla Python 3!

Scan mode:
```
python3 poc-and-scan.py 10.0.0.15 N
```

Scan+Crash mode:
```
python3 poc-and-scan.py 10.0.0.15 Y
```

Output:
```
SMB v311 with LZNT1 detected.
Sending malformed packet per user request!
```

## License
Licensed under the WTFPL license.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!