CVE-2019-17662 PoC — ThinVNC 路径遍历漏洞

Source

https://github.com/thomas-osgood/CVE-2019-17662

Associated Vulnerability

Title: ThinVNC 路径遍历漏洞 (CVE-2019-17662)
Description:ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.

Description

Golang implementation of ThinVNC exploit CVE-2019-17662. For educational purposes only.

Readme

# CVE-2019-17662

Golang implementation of ThinVNC exploit CVE-2019-17662. For educational purposes only. This is meant to be a Golang implementation of the code written by MuirlandOracle found [here](https://github.com/MuirlandOracle/CVE-2019-17662).

## Disclaimer

This code is meant for Educational and White-Hat purposes only. The author of this repository takes no repsonsibility for anything you decide to do. Your actions are your own.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →