Skip to content
Please note that GitHub no longer supports Internet Explorer.

We recommend upgrading to the latest Microsoft Edge, Google Chrome, or Firefox.

Learn more
PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610
Python Other
  1. Python 99.0%
  2. Other 1.0%
Branch: master
Clone or download
Latest commit b0fe902 Jan 26, 2020
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
images
pydtls even cleaner now! Jan 24, 2020
.gitignore added PoC for DoS Jan 24, 2020
README.md added scanner Jan 26, 2020
check.py consistency!!! Jan 26, 2020
dos.py added scanner Jan 26, 2020

README.md

BlueGate

PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610. Thanks to ollypwn for pointing out my silly mistake!

Setup

I'm using a patched version of pydtls as the original repository wouldn't build properly.

cd pydtls
sudo python setup.py install

Denial of Service

A PoC for the DoS attack can be found in dos.py. This essentially crashes the Remote Desktop Gateway service. The initial PoC can be found in the commits or here.

Usage

python dos.py 192.168.8.133 3391

Result

Before: before

After: after

Scanner

A scanner that is able to determin whether the target is vulnerable or not. The script can be found in check.py. The timeout is set to 3 seconds by default but can be adjusted in the source code.

Usage

python check.py 192.168.8.134 3391

Result

It says either Vulnerable! or Not vulnerable!.

You can’t perform that action at this time.