关联漏洞
标题：
Microsoft Remote Desktop Services 资源管理错误漏洞
(CVE-2019-0708)
描述：Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。Remote Desktop Services是其中的一个远程桌面服务组件。 Microsoft Remote Desktop Services中存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。以下
描述
CVE-2019-0708
介绍
# BlueKeepScan
Simple wrapper over PoC from [@zerosum0x0](https://twitter.com/zerosum0x0) for checking CVE-2019-0708 in large network in multithreading.
### Prepare
First of all you shouldn download and install original:
```
git clone https://github.com/zerosum0x0/CVE-2019-0708.git
cd CVE-2019-0708/rdesktop-fork-bd6aa6acddf0ba640a49834807872f4cc0d0a773/
./bootstrap
./configure --disable-credssp --disable-smartcard
make
```
We *strongly* recommend to read original README from [original](https://github.com/zerosum0x0/CVE-2019-0708)
Then scan you network and find open 3389/tcp ports and pull the found addresses to file.
You can use masscan/nmap/etc for this purpose.
### Running
```
go get -v github.com/Rostelecom-CERT/bluekeepscan
cd $GOPATH/github.com/Rostelecom-CERT/bluekeepscan/cmd/bluekeepscan/main
go run main.go -f FILE_WITH_IP -b PATH_TO_RDESKTOP
```
If you don't have go, you can start binary file
```
./bluekeepscan -f FILE_WITH_IP -b PATH_TO_RDESKTOP
```
bluekeepscan create file log.log with results.
文件快照
[4.0K] /data/pocs/bc134a091c20026b4be39889dce9e92684e12231
├── [2.0K] bluekeep.go
├── [4.0K] cmd
│ └── [4.0K] bluekeepscan
│ └── [4.0K] main
│ ├── [3.0M] bluekeepscan
│ ├── [2.4M] bluekeepscan.exe
│ └── [ 613] main.go
└── [1.0K] README.md
3 directories, 5 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。