CVE-2018-8174 PoC — Microsoft Windows VBScript引擎缓冲区错误漏洞

Source

https://github.com/SyFi/CVE-2018-8174

Associated Vulnerability

Title: Microsoft Windows VBScript引擎缓冲区错误漏洞 (CVE-2018-8174)
Description:A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Description

MS Word MS WordPad via IE VBS Engine RCE

Readme

# CVE-2018-8174
MS Word MS WordPad via IE VBS Engine RCE 

MS Word and MS WordPad RCE via IE VBS RCE
https://github.com/smgorelik/Windows-RCE-exploits/tree/master/Web/VBScript

Save the index.html to webserver
then use the python script to generate RTF Exploit
Shellcode is static  Down\Exec Putty.exe from main website

check index.html for the shellcode

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →