sucess install KB4551762,but detection is still vulnerable!
dickens88 opened this issue · 5 comments
sucess install KB4551762,but detection is still vulnerable!
From my tests it seems to depend on whether or not the reg key is present:
(VULNERABLE) - No reg key, no patch
(VULNERABLE) - No reg key, patch
(NOT VULNERABLE) - Reg key, no patch
(NOT VULNERABLE) - Reg key, patch
@ollypwn mentioned to me on Twitter that the scanner needs an update to test for the patched systems.
@hackdefendr That's what I figured and was only trying to give feedback from testing with the script so hopefully it wasn't received negatively. Thank you for responding!
@ollypwn Thanks for your research and PoC script!
Hi Boss, congratulations for the Tool !! I installed it on kali linux 2020, when I go to run it gives me these errors:
CVE-2020-0796-PoC-master/smbprotocol/transport.py", line 57, in wrapped
self._sock = socket.create_connection((self.server, self.port), timeout=self.timeout)
File "/usr/local/lib/python3.7/socket.py", line 728, in create_connection
raise err
File "/usr/local/lib/python3.7/socket.py", line 716, in create_connection
sock.connect(sa)
socket.timeout: timed out
END
Traceback (most recent call last):
File "CVE-2020-0796.py", line 19, in
password="password", encrypt=False) # encryption must be disabled
WHAT CAN IT BE?
Thanks !! ;)
@Lorenz11x I would recommend creating your own separate ticket