SMBGhost_RCE_PoC
SMBGhost_RCE_PoC copied to clipboard
chompie1337
Please
Hello，I always have the problem " Failed to find low stub in physical memory!" Do you have some suggestion? I hope to receive your rely!
Hello，I always have the problem " Failed to find low stub in physical memory!" Do you have some suggestion? I hope to receive your rely!
You check if firewall turn off!
Hello，I always have the problem " Failed to find low stub in physical memory!" Do you have some suggestion? I hope to receive your rely!
On target machine, run:
C:\Users\Administrator>netsh advfirewall set allprofiles state off
Hello，I always have the problem " Failed to find low stub in physical memory!" Do you have some suggestion? I hope to receive your rely!
On target machine, run:
C:\Users\Administrator>netsh advfirewall set allprofiles state off
I had set allprofiles state off.It seem low stub is not lie the address
Are you using you target machine "Debug mode ON"
Because i am getting the same error when my target machine is set to bcdedit /set debug yes
@chompie1337 any ideas?
Hmm, so it seems like it's possible the low stub is not present on the VM. it does a search for it at all physical addresses <1MB. how the VM is configured can affect this but I'm not too sure of the details as there is not much research available about it.
I've tested using VMWare Fusion and VMWare Workstation both BIOS and UEFI using "easy install" setup and it seems to be present in both. Can you describe your testing env?
EDIT: tested the above both in debug mode and non debug mode as well
Hmm, so it seems like it's possible the low stub is not present on the VM. it does a search for it at all physical addresses <1MB. how the VM is configured can affect this but I'm not too sure of the details as there is not much research available about it.
I've tested using VMWare Fusion and VMWare Workstation both BIOS and UEFI using "easy install" setup and it seems to be present in both. Can you describe your testing env?
EDIT: tested the above both in debug mode and non debug mode as well
@chompie1337 i have opened a new issue for this: https://github.com/chompie1337/SMBGhost_RCE_PoC/issues/13
Hmm, so it seems like it's possible the low stub is not present on the VM. it does a search for it at all physical addresses <1MB. how the VM is configured can affect this but I'm not too sure of the details as there is not much research available about it. I've tested using VMWare Fusion and VMWare Workstation both BIOS and UEFI using "easy install" setup and it seems to be present in both. Can you describe your testing env? EDIT: tested the above both in debug mode and non debug mode as well
@chompie1337 i have opened a new issue for this: #13
I use the virtualbox.the vmware is failed in win10