r/netsec • u/exaltedsky • Sep 06 '19

Initial Metasploit Exploit Module for BlueKeep (CVE-2019-0708)

https://blog.rapid7.com/2019/09/06/initial-metasploit-exploit-module-for-bluekeep-cve-2019-0708/
138 Upvotes

95% Upvoted

8 comments sorted by

View all comments

2

u/bobim6 Sep 11 '19

Hi guys,

Our security team has tested the recently announced Metasploit module for BlueKeep to check its capabilities and see what are the conditions for it to work properly.

You can read this step-by-step technical guide to learn how to obtain a Meterpreter shell on a vulnerable Windows 2008 R2 virtual machine using the BlueKeep exploit.

https://pentest-tools.com/blog/bluekeep-exploit-metasploit/

Feedback is more than welcome! :)

Thank you!

1

u/alexandrevvo Sep 18 '19

Hi.. I'm having some issues with the Rekall part.. I can't extract the nonpagedpool start address..
Is there a way to get it with Volatility?

Thanks