Sploitus

Exploit for CVE-2020-0797 CVE-2020-0796 CVE-2020-0797

gitee · 2020-12-08

Exploit Code

MARKDOWN10 lines
## https://sploitus.com/exploit?id=F64C1570-FA5B-54A3-A938-203C8B9A9D30
This repository is a PoC exploit for CVE-2020-0796, a wormable SMBv3 vulnerability. The vulnerability allows an attacker to execute code on a target SMB Server or SMB Client by sending a specially crafted packet. The exploit is implemented in Python and uses the `socket` library to send a packet to the target SMB Server. The packet is crafted to exploit the vulnerability and execute code on the target system.

The target product/service is Microsoft SMBv3, and the vulnerability class/vector is remote code execution (RCE). The probable entry point is the `CVE-2020-0796_Scan_Vul.py` script, which is used to scan for vulnerable systems. The script sends a packet to the target SMB Server and checks if the response contains the expected values to indicate vulnerability.

The expected impact of the exploit is remote code execution, allowing an attacker to execute arbitrary code on the target system. The observable network or file artifacts/IO include the packet sent by the exploit and the response from the target system.

The preconditions for the exploit to work are that the target system must be running a vulnerable version of Windows 10 or Windows Server, and the SMBv3 protocol must be enabled. The exploit does not require any authentication or credentials to work.

The exploit