Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Trying to detect (check) not to exploit the vulnerability #14

Open
geffrix opened this issue Jun 28, 2020 · 1 comment
Open

Trying to detect (check) not to exploit the vulnerability #14

geffrix opened this issue Jun 28, 2020 · 1 comment

Comments

@geffrix
Copy link

geffrix commented Jun 28, 2020

Hello!, anybody is trying to use this PoC to detect and not to exploit vulnerable systems?
On not vulnerable systems I saw that "physical read primitive" fails, but in vulnerable systems the function "write_srvnet_buffer_hdr(ip, port, data, offset) - smb_compress(sock, compressed_data, 0xFFFFEFFF, dummy_data)" causes a BSOD.
Do you have any ideas to modify the code in order to do a check of the vulnerability without causing a BSOD?

Best regards,
Geffrey

@Mdbset
Copy link

Mdbset commented Jul 3, 2020

The complexity of creating a vulnerability checker is PoC instability. Obtaining information from the server requires modifying the kernel memory of the OS, which in case of failure will lead to BSOD.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants