Michael-ZecOps

Hi, The "Target is not vulnerable" message means that the target discards a simple packet which triggers the bug, either because it's patched, or because of something else, such as...

Hi, Windows Server 2019 is based on the Windows version 1809 codebase, which means that it doesn't come with support for SMBv3.1.1 compression and is not vulnerable.

The target machine is likely to crash when the connection drops, and maybe in other network activity scenarios. Technical details about the reason for that will be published soon in...

[Here it is](https://blog.zecops.com/vulnerabilities/smbleedingghost-writeup-part-iii-from-remote-read-smbleed-to-rce/), refer to the "Getting a module base address" section for technical information regarding the crash you're seeing.

Hi, Please check whether you have update KB4512941 installed. If not, the POC won't work due to a null dereference bug in Windows. Refer to the **Affected Windows versions** section...

As mentioned in the readme, there's limited support for targets with more than one logical processor. Is your target running in a VM? If it is, you can configure it...

The batch script requires an internet connection to download symbols. I'm not sure what else can cause it to fail (any error messages?), but as a workaround you can copy...

Remove the following part that appears twice in the batch file: ` | findstr #`, so that the lines only contain `%cmd%`. Run the script and post the full output...

I'm glad that it works. Still, if you can reproduce the issue and remove the part that I mentioned, perhaps we can see what went wrong. Then I'll be able...

The two symbols that failed to load are the one that require symbols. Try the following: add the following lines at the beginning of the batch file, run it, and...