Get RCE with SMBleed + SMBGhost - SMBleedingGhost
🛡 SMBleed and SMBGhost still plague IT infrastructure in companies worldwide. That’s why we’re diving into one of the most interesting tactics that malicious actors use: vulnerability chaining.
Follow the steps to see for yourself how much easier you can achieve Remote Code Execution by chaining SMBleed (CVE-2020-1206) vulnerability with SMBGhost (CVE-2019-0796).
🛠 Learn how to chain SMBleed and SMBGhost to attack Windows 10 (CVE-2020-1206) and create your own Proof of Concept!
In this practical guide, we share how use an open-source exploit which combines the SMBleed and SMBGhost vulnerabilities to achieve unauthenticated Remote Code Execution, originally named SMBleedingGhost.
⚙️ Read the full technical walk-through by Cristian Cornea and learn how to attackers can achieve Remote Code Execution in specific Windows 10 versions ➡️ https://pentest-tools.com/blog/smblee...
______________
💡 See ALL OUR TOOLS: https://pentest-tools.com/alltools
@ us on Twitter: / pentesttoolscom
Join 46k+ offensive security specialists on LinkedIn: / pentesttools
#PenetrationTesting #Pentesting #EthicalHacking #PentestToolsCom
______________
WHAT IS Pentest-Tools.com?
Use the Pentest-Tools.com platform to quickly detect and report vulnerabilities in websites and network infrastructures!
✔ 20+ tightly integrated penetration testing and ethical hacking tools for easier, faster, and more effective engagements
✔ Built for pentesters, sysadmins, web devs, MSPs, business owners, and other professionals seeking to automate and save time
✔ Painless vulnerability management: add manual findings, change risk levels, delete obsolete targets, create and export customizable reports (complete with vulnerability information and remediation suggestions)
✔ Instant overview of all open ports, services, and running software from all your targets in a central, unified view (Attack Surface)
✔ Comprehensive scanning options: scheduled scans, robust API, internal network scanning through VPN agent, scan multiple targets at the same time
✔ Flexible subscription: choose monthly billing and you can cancel anytime. Alternatively, choose the yearly plan and get a 15% discount!
"Pentest-Tools is great for streamlining any security engagement" - Tavis D., Security Engineering Manager
"A superb toolbox, not the usual easy online toy" - Mauro G., DevOps Specialist
“Pentest-Tools.com is the Swiss Army Knife of scanning tools”
Mark D., Apple Certified Support Professional
See how our customers use the platform: https://www.g2.com/products/pentest-t...