{"id":13389755,"url":"https://github.com/k8gege/CVE-2019-0708","last_synced_at":"2025-03-13T14:31:57.620Z","repository":{"id":40614115,"uuid":"186849775","full_name":"k8gege/CVE-2019-0708","owner":"k8gege","description":"3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)","archived":false,"fork":false,"pushed_at":"2019-06-13T13:07:03.000Z","size":2381,"stargazers_count":389,"open_issues_count":23,"forks_count":189,"subscribers_count":15,"default_branch":"master","last_synced_at":"2025-03-12T23:41:43.988Z","etag":null,"topics":["3389","cve-2019-0708","exp","exploit","hacking","k8cscan","pentest","poc","rdp","security"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/k8gege.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-05-15T15:01:38.000Z","updated_at":"2025-01-13T09:59:12.000Z","dependencies_parsed_at":"2022-07-31T23:48:36.620Z","dependency_job_id":null,"html_url":"https://github.com/k8gege/CVE-2019-0708","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/k8gege%2FCVE-2019-0708","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/k8gege%2FCVE-2019-0708/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/k8gege%2FCVE-2019-0708/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/k8gege%2FCVE-2019-0708/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/k8gege","download_url":"https://codeload.github.com/k8gege/CVE-2019-0708/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243422601,"owners_count":20288488,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["3389","cve-2019-0708","exp","exploit","hacking","k8cscan","pentest","poc","rdp","security"],"created_at":"2024-07-30T13:01:30.415Z","updated_at":"2025-03-13T14:31:56.714Z","avatar_url":"https://github.com/k8gege.png","language":"Python","funding_links":[],"categories":["Python (1887)","Python"],"sub_categories":[],"readme":"# 微软3389远程漏洞CVE-2019-0708批量检测工具\n\u003cp\u003e\u003cspan style=\"font-size: 16px;\"\u003e\u003cstrong\u003e0x001 Win下检测\u003c/strong\u003e\u003c/span\u003e\u003c/p\u003e\n\u003cdiv class=\"cnblogs_Highlighter\"\u003e\n\u003cpre class=\"brush:csharp;gutter:true;\"\u003ehttps://github.com/robertdavidgraham/rdpscan\n\nC:\\Users\\K8team\\Desktop\\rdpscan-master\\vs10\\Release 的目录\n\n2019/06/02  02:11    \u0026lt;DIR\u0026gt;          .\n2019/06/02  02:11    \u0026lt;DIR\u0026gt;          ..\n2019/06/02  01:55         2,582,016 libcrypto-1_1.dll\n2019/06/02  01:57           619,520 libssl-1_1.dll\n2019/06/02  02:04           172,032 rdpscan.exe\n               3 个文件      3,373,568 字节\n               2 个目录  2,462,433,280 可用字节\n\nC:\\Users\\K8team\\Desktop\\rdpscan-master\\vs10\\Release\u0026gt;rdpscan 192.168.1.101-192.168.1.105\n192.168.1.101 - VULNERABLE - CVE-2019-0708\n192.168.1.102 - VULNERABLE - CVE-2019-0708\n\nC:\\Users\\K8team\\Desktop\\rdpscan-master\\vs10\\Release\u0026gt;rdpscan 192.168.1.101-192.168.1.105\n192.168.1.102 - SAFE - CredSSP/NLA required\n192.168.1.101 - VULNERABLE - CVE-2019-0708\n\u003c/pre\u003e\n\u003c/div\u003e\n\u003cp\u003e\u003cimg src=\"https://img2018.cnblogs.com/blog/1463611/201906/1463611-20190602110827397-225063907.png\" alt=\"\" /\u003e\u003c/p\u003e\n\u003cp\u003e\u003cspan style=\"font-size: 16px;\"\u003e\u003cstrong\u003e0x002 Linux下检测\u003c/strong\u003e\u003c/span\u003e\u003c/p\u003e\n\u003cdiv class=\"cnblogs_Highlighter\"\u003e\n\u003cpre class=\"brush:csharp;gutter:true;\"\u003ehttps://github.com/SugiB3o/Check-vuln-CVE-2019-0708\n\nroot@kali:~/Desktop# ./rdesktop 192.168.1.101:3389\nERROR: Failed to open keymap en-us\n[+] Registering MS_T120 channel.\nFailed to negotiate protocol, retrying with plain RDP.\n[+] Sending MS_T120 check packet (size: 0x20 - offset: 0x8)\n[+] Sending MS_T120 check packet (size: 0x10 - offset: 0x4)\n[!] Target is VULNERABLE!!!\n\u003c/pre\u003e\n\u003c/div\u003e\n\u003cp\u003e\u0026nbsp;\u003cimg src=\"https://img2018.cnblogs.com/blog/1463611/201906/1463611-20190602111102444-194225778.png\" alt=\"\" /\u003e\u003c/p\u003e\n\u003cp\u003e\u003cspan style=\"font-size: 16px;\"\u003e\u003cstrong\u003e0x003 Cscan批量检测\u003c/strong\u003e\u003c/span\u003e\u003c/p\u003e\n\u003cp\u003e将rdpscan.exe以及dll文件拷贝至Cscan目录,新建Cscan.ini文件,内容如下\u003c/p\u003e\n\u003cdiv class=\"cnblogs_Highlighter\"\u003e\n\u003cpre class=\"brush:csharp;gutter:true;\"\u003e[Cscan]\nexe=rdpscan.exe\narg=$ip$\n\u003c/pre\u003e\n\u003c/div\u003e\n\u003cp\u003e\u0026nbsp;批量扫描\u003c/p\u003e\n\u003cp\u003eCscan.exe 192.168.1.101/24\u0026nbsp; (扫单个C段，多个C段或B段请参考Cscan说明)\u003c/p\u003e\n\u003cp\u003e本地可使用GUI(仅.net 2.0,请根据自身或目标电脑.net版本选择Cscan版本)\u003c/p\u003e\n\u003cp\u003e\u003cspan style=\"font-size: 16px;\"\u003e\u003cstrong\u003e\u003cimg src=\"https://img2018.cnblogs.com/blog/1463611/201906/1463611-20190602112902679-751026098.jpg\" alt=\"\" /\u003e\u003c/strong\u003e\u003c/span\u003e\u003c/p\u003e\n\u003cp\u003e\u003cspan style=\"font-size: 16px;\"\u003e\u003cstrong\u003e0x004 Bin下载\u003c/strong\u003e \u003c/span\u003e\u003c/p\u003e\n\u003cp\u003eWin下编译可能比较麻烦这里提供编译好的成品\u003c/p\u003e\n\u003cp\u003e分别是Win7 x86的exe，当然64系统下也可以用\u003c/p\u003e\n\u003cp\u003eKali 2019 x64的可执行文件,其它版本自行编译\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003ePOC:\u003c/strong\u003e\u0026nbsp; \u003ca href=\"https://github.com/k8gege/CVE-2019-0708\" target=\"_blank\"\u003ehttps://github.com/k8gege/CVE-2019-0708\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eCscan:\u003c/strong\u003e \u003ca href=\"https://www.cnblogs.com/k8gege/p/10519321.html\" target=\"_blank\"\u003ehttps://www.cnblogs.com/k8gege/p/10519321.html\u003c/a\u003e\u003c/p\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fk8gege%2FCVE-2019-0708","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fk8gege%2FCVE-2019-0708","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fk8gege%2FCVE-2019-0708/lists"}