
[Laurent Gaffi?] has discovered an
exploit that effects Windows Vista, Windows 7,
and possibly Windows Server 2008 (unconfirmed). This method attacks via
the NEGOTIATE PROTOCOL REQUEST which is the first SMB query sent. The
vulnerability is present only on Windows versions that include
Server Message Block 2.0 and have the protocol enabled. A successful attack requires no local access to the machine and results in a
Blue Screen of Death.
POC
==========================================================
Smb-Bsod.py:
#!/usr/bin/python
Read more..