CVE-2017-5689 PoC — 多款Intel产品安全漏洞

Source

https://github.com/MlSebrell/amthoneypot

Associated Vulnerability

Title: 多款Intel产品安全漏洞 (CVE-2017-5689)
Description:An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

Description

Honeypot for Intel's AMT Firmware Vulnerability CVE-2017-5689

Readme

Honeypot for Intel's AMT Firmware Vulnerability CVE-2017-5689.

Webserver that listens on TCP - [ ] Daemonizeport 16922. Replicates the behaviour of Intel's AMT management service.
- [ ] Daemonize
Building -

```# go build server.go```

Running - 

```# ./server logfile.txt```

### TODO
- [ ] Add templating to make content dynamic / random
- [ ] Add error checking
- [ ] Add some form of RCE?

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →