@GossiTheDog Hey! If you've got the exploit working could you test whether it just affects native WSUS servers or can it also be used to exploit SCCM servers that have the WSUS functionality enabled?
I'm seeing some pretty strong evidence the SCCM+WSUS combo setup is getting pwned in the wild too.