Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add RCE Exploit For CVE-2020-0796 (SMBGhost) #15024

Merged
merged 15 commits into from
May 20, 2021
Merged

Add RCE Exploit For CVE-2020-0796 (SMBGhost) #15024

merged 15 commits into from
May 20, 2021

Commits on Apr 9, 2021

  1. Initial commit of the CVE-20202-0796 exploit

    @zeroSteiner
    zeroSteiner committed Apr 9, 2021
    Configuration menu
    Copy the full SHA
    8b3381a View commit details
    Browse the repository at this point in the history

  2. Restructure and refactor the kernel mode shellcode

    @zeroSteiner
    zeroSteiner committed Apr 9, 2021
    Configuration menu
    Copy the full SHA
    c4055f3 View commit details
    Browse the repository at this point in the history

  3. Refactor constants into a proper target hash

    @zeroSteiner
    zeroSteiner committed Apr 9, 2021
    Configuration menu
    Copy the full SHA
    d8bed16 View commit details
    Browse the repository at this point in the history

  4. Add SMBGhost RCE module docs

    @zeroSteiner
    zeroSteiner committed Apr 9, 2021
    Configuration menu
    Copy the full SHA
    dd9936a View commit details
    Browse the repository at this point in the history

  5. Update the LPE exploit paths in Visual Studio

    @zeroSteiner
    zeroSteiner committed Apr 9, 2021
    Configuration menu
    Copy the full SHA
    0e117cc View commit details
    Browse the repository at this point in the history

  6. Update module metadata for SMBGhost

    @zeroSteiner
    zeroSteiner committed Apr 9, 2021
    Configuration menu
    Copy the full SHA
    f9e6322 View commit details
    Browse the repository at this point in the history

  7. Bump RubySMB and add a simple check method

    @zeroSteiner
    zeroSteiner committed Apr 9, 2021
    Configuration menu
    Copy the full SHA
    63e438e View commit details
    Browse the repository at this point in the history

Commits on Apr 13, 2021

  1. Adjust the hal heap base address calculation

    @zeroSteiner
    zeroSteiner committed Apr 13, 2021
    Configuration menu
    Copy the full SHA
    ec962cf View commit details
    Browse the repository at this point in the history

  2. Search a wider range of the hal heap and remove an irrelevant sentence

    @zeroSteiner
    zeroSteiner committed Apr 13, 2021
    Configuration menu
    Copy the full SHA
    ba9674c View commit details
    Browse the repository at this point in the history

  3. Combine the shellcode move operations

    @zeroSteiner
    zeroSteiner committed Apr 13, 2021
    Configuration menu
    Copy the full SHA
    a9d3120 View commit details
    Browse the repository at this point in the history

  4. Avoid a CRITICAL_STRUCTURE_CORRUPTION bugcheck from patch guard

    @zeroSteiner
    zeroSteiner committed Apr 13, 2021
    Configuration menu
    Copy the full SHA
    6176f6f View commit details
    Browse the repository at this point in the history

Commits on Apr 16, 2021

  1. Tweak what is restored to avoid a bugcheck

    @zeroSteiner
    zeroSteiner committed Apr 16, 2021
    Configuration menu
    Copy the full SHA
    cc1aa34 View commit details
    Browse the repository at this point in the history

Commits on Apr 20, 2021

  1. Fix a bug when restoring corrupted memory

    @zeroSteiner
    zeroSteiner committed Apr 20, 2021
    Configuration menu
    Copy the full SHA
    00db376 View commit details
    Browse the repository at this point in the history

Commits on May 20, 2021

  1. Couple of minor cleanups for the assembly stub

    @zeroSteiner
    zeroSteiner committed May 20, 2021
    Configuration menu
    Copy the full SHA
    5e13fdb View commit details
    Browse the repository at this point in the history

  2. Add a clear warning about instability due to KPP

    @zeroSteiner
    zeroSteiner committed May 20, 2021
    Configuration menu
    Copy the full SHA
    a6f650a View commit details
    Browse the repository at this point in the history