原PoC甚至符号都打错了!太不走心了!
Switch branches/tags
Nothing to show
Clone or download
Pull request Compare This branch is 15 commits ahead of idkwim:master.
Latest commit 7d76c26 Sep 18, 2018
Permalink
Failed to load latest commit information.
9月-12-2018 20-18-25.gif Add files via upload Sep 12, 2018
README.md Update README.md Sep 18, 2018
xml.html Create xml.html Sep 12, 2018
xml.vbs Create xml.vbs Sep 12, 2018
xml.xml Update xml.xml Sep 12, 2018

README.md

CVE-2018-8420

xzbgs&Chaitin tech

修改了原POC xml.xml 中的一个单引号问题。
增加了一个IE远程利用方式。

vbs本地点开即可弹出计算器.
html文件IE远程命令执行.

问题的根源在于msxml解析器的问题,所以估计还有很多程序、功能都有调用了这个组件,也存在相应的问题,后续有时间补充。 演示

Affected Products

Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows RT 8.1
Windows Server 2012 R2 (Server Core installation)
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows Server 2016
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016 (Server Core installation)
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Windows Server, version 1709 (Server Core Installation)
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows Server, version 1803 (Server Core Installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)