Skip to content
This repository has been archived by the owner on Oct 15, 2021. It is now read-only.

sucess install KB4551762,but detection is still vulnerable! #9

Open
dickens88 opened this issue Mar 13, 2020 · 5 comments
Open

sucess install KB4551762,but detection is still vulnerable! #9

dickens88 opened this issue Mar 13, 2020 · 5 comments

Comments

@dickens88
Copy link

sucess install KB4551762,but detection is still vulnerable!

@kpsmiley23
Copy link

From my tests it seems to depend on whether or not the reg key is present:
(VULNERABLE) - No reg key, no patch
(VULNERABLE) - No reg key, patch
(NOT VULNERABLE) - Reg key, no patch
(NOT VULNERABLE) - Reg key, patch

@hackdefendr
Copy link

@ollypwn mentioned to me on Twitter that the scanner needs an update to test for the patched systems.

@kpsmiley23
Copy link

@hackdefendr That's what I figured and was only trying to give feedback from testing with the script so hopefully it wasn't received negatively. Thank you for responding!
@ollypwn Thanks for your research and PoC script!

@Lorenz11x
Copy link

Hi Boss, congratulations for the Tool !! I installed it on kali linux 2020, when I go to run it gives me these errors:
CVE-2020-0796-PoC-master/smbprotocol/transport.py", line 57, in wrapped
self._sock = socket.create_connection((self.server, self.port), timeout=self.timeout)
File "/usr/local/lib/python3.7/socket.py", line 728, in create_connection
raise err
File "/usr/local/lib/python3.7/socket.py", line 716, in create_connection
sock.connect(sa)
socket.timeout: timed out

END

Traceback (most recent call last):
File "CVE-2020-0796.py", line 19, in
password="password", encrypt=False) # encryption must be disabled

WHAT CAN IT BE?
Thanks !! ;)

@gbiagomba
Copy link

@Lorenz11x I would recommend creating your own separate ticket

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants