Home » Education » Chain SMBleed & SMBGhost to attack Win10 (CVE-2020-1206)

Chain SMBleed & SMBGhost to attack Win10 (CVE-2020-1206)

Written By Pentest-Tools on Monday, Jul 06, 2020 | 05:01 AM

 
🛡 SMBleed and SMBGhost still plague IT infrastructure in companies worldwide. That’s why we’re diving into one of the most interesting tactics that malicious actors use: vulnerability chaining. Follow the steps to see for yourself how much easier you can achieve Remote Code Execution by chaining SMBleed (CVE-2020-1206) vulnerability with SMBGhost (CVE-2019-0796). 🛠 Learn how to chain SMBleed and SMBGhost to attack Windows 10 (CVE-2020-1206) and create your own Proof of Concept! In this practical guide, we share how to pop the Kernel Memory with SMBleed and use the vulnerability chaining tactic to simulate how attackers can take advantage of SMB vulns. ⚙️ Read the full technical walk-through by Cristian Cornea and learn how to attackers can achieve Remote Code Execution in specific Windows 10 versions ➡️ https://pentest-tools.com/blog/smbleedingghost-exploit/ ______________ 💡 See ALL OUR TOOLS: https://pentest-tools.com/alltools @ us on Twitter: https://twitter.com/pentesttoolscom Join 46k+ offensive security specialists on LinkedIn: https://www.linkedin.com/company/pentesttools/ #PenetrationTesting #Pentesting #EthicalHacking #PentestToolsCom ______________ WHAT IS Pentest-Tools.com? Use the Pentest-Tools.com platform to quickly detect and report vulnerabilities in websites and network infrastructures! ✔ 20+ tightly integrated penetration testing and ethical hacking tools for easier, faster, and more effective engagements ✔ Built for pentesters, sysadmins, web devs, MSPs, business owners, and other professionals seeking to automate and save time ✔ Painless vulnerability management: add manual findings, change risk levels, delete obsolete targets, create and export customizable reports (complete with vulnerability information and remediation suggestions) ✔ Instant overview of all open ports, services, and running software from all your targets in a central, unified view (Attack Surface) ✔ Comprehensive scanning options: scheduled scans, robust API, internal network scanning through VPN agent, scan multiple targets at the same time ✔ Flexible subscription: choose monthly billing and you can cancel anytime. Alternatively, choose the yearly plan and get a 15% discount! "Pentest-Tools is great for streamlining any security engagement" - Tavis D., Security Engineering Manager "A superb toolbox, not the usual easy online toy" - Mauro G., DevOps Specialist “Pentest-Tools.com is the Swiss Army Knife of scanning tools” Mark D., Apple Certified Support Professional See how our customers use the platform: https://www.g2.com/products/pentest-tools-com/reviews