0

I am a university student currently trying to demonstrate exploitation of the SMBGhost Vulnerability on Windows 10 (Version: 1903, Build Number: 18362.356). I need to provide evidence that the vulnerability exists. However when using Nessus (Community Edition) within my Kali Linux environment. The vulnerability does not get detected, however when using a SMBGhost Scanner on github it says my Windows 10 host is vulnerable. Please can I get advice as to how to configure my Nessus in order for it to show that the SMBGhost vulnerability exists.

I have attached screenshots of my current results from Nessus and Windows 10 Version. Windows 10 VersionCurrent Results from Nessus

Improve this question
2
  • 1
    Your task mandates that you have to use Nessus?
    – Sir Muffington
    Apr 15, 2022 at 19:36
  • I don't have to use Nessus but tools that have a GUI where I can take a screenshot of all the vulnerabilities identified.
    – Mahin Chowdhury
    Apr 16, 2022 at 0:27

1 Answer 1

Reset to default
1

The Nessus plugins that cover CVE-2020-0796 (SMBGhost) are listed here. You need to add "Basic Network Scan" with "Credentials" as scan type; do look into this discussion.

There's also a Metasploit module exploit/windows/local/cve_2020_0796_smbghost, which requires a session. More details here.

I would go with a Nmap scan first:

nmap -p445 --script cve-2020-0796 <<target>>
Improve this answer
3
  • Unfortunately this solution has not worked. Could you provide specific setup instructions for the scan.
    – Mahin Chowdhury
    Apr 18, 2022 at 12:37
  • @MahinChowdhury may I know the Nessus version? Also, please be resourceful in that understand how a Nessus scan detects vulnerabilities. For a vulnerability to get detected, respective plugin needs to be part of the scan. It all boils down to whether the Nessus version supports it, if so what scan type and plugin group to include.
    – Deepak D
    Apr 18, 2022 at 15:13
  • Sorry for the late reply, I am using Nessus Community version 10.1.2 on Kali Linux (version 2022.1) and the plugins that it has available for the vulnerability is 134420,134421,134428. I used it on a Advanced Network Scan and I did not deselect any plugins
    – Mahin Chowdhury
    Apr 18, 2022 at 23:06

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .