https://github.com/zcgonvh/CVE-2020-0688

Exploit and detect tools for CVE-2020-0688
https://github.com/zcgonvh/CVE-2020-0688

Last synced: 4 months ago
JSON representation

Exploit and detect tools for CVE-2020-0688

• Host: GitHub
• URL: https://github.com/zcgonvh/CVE-2020-0688
• Owner: zcgonvh
• Created: 2020-03-01T12:57:32.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2020-03-21T05:44:48.000Z (over 5 years ago)
• Last Synced: 2024-11-21T11:38:29.291Z (12 months ago)
• Language: C#
• Size: 1.75 MB
• Stars: 352
• Watchers: 9
• Forks: 79
• Open Issues: 8
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - zcgonvh/CVE-2020-0688 - Exploit and detect tools for CVE-2020-0688 (C# #)

README

          
## Exploit and detect tools for CVE-2020-0688(Microsoft Exchange default MachineKeySection deserialize vulnerability)

### build

	csc ExchangeCmd.cs

	csc ExchangeDetect.cs

### usage

	ExchangeDetect   

 ![](https://raw.githubusercontent.com/zcgonvh/CVE-2020-0688/master/detect.png)

 

	ExchangeCmd   

	sub commands:

		exec  [args]

		  exec command

			

		arch

		  get remote process architecture(for shellcode)

			

		shellcode 

		  run shellcode

			

		exit

		  exit program

![](https://raw.githubusercontent.com/zcgonvh/CVE-2020-0688/master/exp.png)

for more information, read [writeup.pdf](https://raw.githubusercontent.com/zcgonvh/CVE-2020-0688/master/writeup.pdf)(in chinese).