Skip to content
forked from ly4k/SMBGhost

Scanner for CVE-2020-0796 - SMBv3 RCE

Notifications You must be signed in to change notification settings

CTFlag/SMBGhost

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 

Repository files navigation

SMBGhost

Simple scanner for CVE-2020-0796 - SMBv3 RCE.

The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload.

It checks for SMB dialect 3.1.1 and compression capability through a negotiate request.

A network dump of the scanner running against a Windows 2019 Server (10.0.0.133) can be found under SMBGhost.pcap.

Usage

python3 scanner.py <IP>

Workarounds

ADV200005 | Microsoft Guidance for Disabling SMBv3 Compression

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" DisableCompression -Type DWORD -Value 1 -Force

About

Scanner for CVE-2020-0796 - SMBv3 RCE

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%