CVE-2019-0708 PoC — Microsoft Remote Desktop Services 资源管理错误漏洞

Source

https://github.com/mekhalleh/cve-2019-0708

Associated Vulnerability

Title:Microsoft Remote Desktop Services 资源管理错误漏洞 (CVE-2019-0708)
Description:A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Description

Metasploit module for massive Denial of Service using #Bluekeep vector.

Readme

# CVE-2019-0708

This module checks a range of hosts for the CVE-2019-0708 vulnerability by binding
the MS_T120 channel outside of its normal slot and sending DoS packets.

I just modified the initial metasploit module for this vuln to produce a denial of service attack.

![alt text][module_info]

![alt text][module_demo]

![alt text][module_crash]

[module_info]: https://raw.githubusercontent.com/mekhalleh/cve-2019-0708/master/pictures/demo-01.png "Module: info"
[module_demo]: https://raw.githubusercontent.com/mekhalleh/cve-2019-0708/master/pictures/demo-02.png "Module: demo"
[module_crash]: https://raw.githubusercontent.com/mekhalleh/cve-2019-0708/master/pictures/demo-03.png "Module: crash"

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!