chompie1337/SMBGhost_RCE_PoC

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1395 stars · 338 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python proof-of-concept exploit for CVE-2020-0796 (SMBGhost), achieving pre-authentication remote code execution against vulnerable Windows SMBv3 servers via kernel shellcode injection. It is a research/demo artifact intended for education in a lab environment.

Use cases

• demonstrate SMBGhost CVE-2020-0796 exploitation in a lab
• study kernel RCE exploit techniques for SMBv3 compression bugs
• test whether a Windows host is vulnerable to SMBGhost
• learn shellcode injection and PTE NX-bit clearing methods
• reference material for writing Windows kernel exploits

When to choose

• you are researching or teaching Windows kernel exploitation
• you need a working reference PoC for CVE-2020-0796
• you are validating SMBv3 patching in an isolated test environment

When to avoid

• you need a reliable, production-grade exploitation tool
• you want a safe vulnerability scanner rather than an exploit
• you lack authorization to test the target system
• you need stable behavior - the PoC can crash (BSOD) targets

Facets

cli-tool · maturity experimental

penetration-testing security security penetration-testing python cli windows exploit cve-2020-0796 smbghost rce proof-of-concept kernel-exploitation vulnerability-research

Member repositories

For agents

markdown · JSON · MCP: product_card(name="chompie1337/SMBGhost_RCE_PoC")