We delve into CVE-2024-38077, a critical security vulnerability identified in Windows Server 2025. This flaw, if exploited, could allow unauthorized users to execute malicious code remotely.
We present a comprehensive exploration of both the exploit (CVE-2024-38077-EXP) and the proof of concept (CVE-2024-38077-POC), providing in-depth technical insights into the vulnerability’s impact and exploitation techniques.
Developed by security researchers qi4L and zhiniangpeng, these tools demonstrate the potential risks and underscore the importance of timely patches.
Our coverage includes practical guidance on testing systems for susceptibility to this vulnerability, ensuring IT professionals and system administrators can safeguard their environments effectively.
【修复版，作者：qi4L】
有效范围：仅 Windows Server 2025
使用方法：
options:
-h, --help show this help message and exit
--target_ip TARGET_IP
Target IP, eg: 192.168.120.1
--evil_ip EVIL_IP Evil IP, eg: 192.168.120.2
--evil_dll_path EVIL_DLL_PATH
Evil dll path, eg: \smb\evil_dll.dll
--check_vuln_exist CHECK_VULN_EXIST
Check vulnerability exist before exploitThe groupdel command in Linux removes a group from the system. It deletes the group's entry from /etc/group and /etc/gshadow,…
The wc command in Linux counts lines, words, characters, and bytes in files or standard input. It…
The top command in Linux provides a real-time view of running processes and system resource usage. From…
The usermod command in Linux modifies existing user account attributes. You can use it to manage group…
The sort command in Linux reads lines from files or standard input and writes them to standard…
The wall command in Linux sends a message to the terminals of all currently logged-in users. The…