Penetration Testing Toolkit Includes Exploit For 'Incredibly Dangerous' Bluekeep Vulnerability

'In May, Microsoft released a patch for a bug in several versions of
Windows that is so bad that the company felt it even had to release a
fix for Windows XP, an operating system that (has been unsupported)
for five years. That vulnerability is known as BlueKeep, and it has
kept a lot of security researchers up at night. They are worried that
someone could write an exploit for it and make a worm that could wreak
havoc the way WannaCry or NotPetya -- two viruses that spread almost
uncontrollably all over the world locking thousands of computers --
did.... Researchers were so worried about this vulnerability that for
months, no one has published the code for a proof-of-concept exploit.
In other words, no one wanted to be the guy to even prove that this
type of malware was even possible to write.

Until now.

On Tuesday, Immunity, a long time US government contractor, announced
that it had developed an exploit for BlueKeep and included it into its
penetration testing toolkit Canvas, which is available only to paying
subscribers. Canvas customers, can now exploit this bug using
Immunity's own code.

ZDNet notes that Canvas licenses "cost between thousands and tens of
thousands of US dollars," but also adds that "hackers have been known
to pirate or legitimately buy penetration testing tools."'

-- source: https://tech.slashdot.org/story/19/07/27/042203

Cheers, Peter
-- 
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
_______________________________________________
wlug mailing list | [email protected]
Unsubscribe: https://list.waikato.ac.nz/mailman/listinfo/wlug