CVE-2017-17099 PoC — Flexense SyncBreeze Enterprise HTTP服务器缓冲区错误漏洞

Source

https://github.com/wetw0rk/Exploit-Development

Associated Vulnerability

Title: Flexense SyncBreeze Enterprise HTTP服务器缓冲区错误漏洞 (CVE-2017-17099)
Description:There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under the Windows SYSTEM account.

Description

CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002

Readme

# Developed Exploits

This repository will contain any exploit or proof of concept code I release publicly. In addition to this, I will include Metasploit Modules, and ported exploits.

## Metasploit Modules

This directory will contain all Metasploit modules I've developed. Note that code within this directory may be a standalone PoC in another directory.

## Ported Exploits

Exploitation is one of the hardest skills to master as a Hacker. This directory will contain vulnerabilities I have not personally discovered, but instead re-created. In order to truly understand attacks, you must take apart an exploit and try to recreate it yourself. Keep in mind this repository only contains code published on other websites / blogs. I WILL NOT place every exploit I port here (would be a lot larger).

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →