danigargu/CVE-2020-0796
FreeCVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost
FreeFree tier
About danigargu/CVE-2020-0796
CVE-2020-0796 exploit for Windows SMBv3 Local Privilege Escalation (LPE). Also known as SMBGhost or CoronaBlue, this proof-of-concept exploit targets a memory corruption vulnerability in the SMBv3 compression feature (CVE-2020-0796) on Windows 10 and Windows Server versions (1903, 1909). The repository provides the exploit source code in C and C++, along with references to detailed analysis and writeups from security researchers. Developed by Daniel García Gutiérrez and Manuel Blanco Parajón, the project has garnered over 1,400 stars and 340 forks on GitHub, indicating significant interest in the security research community.
Key Features
Exploits CVE-2020-0796 SMBv3 compression vulnerability for local privilege escalation
Source code available in C (96.6%) and C++ (3.4%)
Includes references to detailed analysis and writeups from multiple security teams
Public repository with 1.4k stars and 340 forks
Single release (cve-2020-0796-local) from April 2020
Pros & Cons
Pros
- Well-documented with links to external analysis and writeups
- Active community interest (high stars and forks)
- Provides a working proof-of-concept exploit
- Open source, allowing review and customization
Cons
- Exploit is for a vulnerability that has been patched since March 2020
- Potential for misuse if used without proper authorization
- Limited to specific Windows versions (1903, 1909) that are now outdated
- Requires local access to exploit (LPE, not remote)
Best For
Security research and vulnerability demonstrationTesting SMBv3 patching status on Windows systemsEducational analysis of Windows kernel exploitation techniquesPenetration testing (with proper authorization) for assessing CVE-2020-0796 impact
FAQ
What does CVE-2020-0796 affect?
CVE-2020-0796 is a remote code execution vulnerability in the Windows SMBv3 protocol's compression feature, affecting Windows 10 version 1903 and 1909, and Windows Server versions 1903 and 1909. This exploit is for local privilege escalation (LPE) leveraging the same bug.
Who is the author of this exploit?
The exploit was created by Daniel García Gutiérrez (@danigargu) and Manuel Blanco Parajón (@dialluvioso_).
Is this exploit still effective on modern Windows systems?
No, Microsoft released a security update in March 2020 that patched CVE-2020-0796. Modern Windows systems with updates applied are not vulnerable to this exploit.
What programming languages does the exploit use?
The repository is written primarily in C (96.6%) with some C++ (3.4%).