ble_norton_core

Norton Core Secure WiFi 路由器 BLE 服务命令注入 PoC CVE-2018-5234 更多信息请阅读 论文。 为了演示利用过程，我们将使用： 操作系统 GNU/Linux； 蓝牙适配器； BlueZ 工具（用于测试蓝牙连接）。 为了使用脚本，我们需要提前安装所有依赖： root@kitploit: $ pip install -r ./requirements.txt 借助 BlueZ 工具，应确保蓝牙已启用且功能正常。 1. 重启路由器以访问工程页面。 2. 以 root 用户身份启动 PoC（操作蓝牙所需），并将要执行的命令作为参数传入：...

Norton Core Secure WiFi Router - BLE Command Injection (PoC)

Norton Core Secure WiFi Router - BLE Command Injection PoC PoC command injection in BLE service of Norton Core Secure WiFi Router CVE-2018-5234 For more information read paper. To demonstrate the exploitation, we will use: - OS GNU/Linux; - Bluetooth dongle adapter; - BlueZ utility for testing...

Norton Core Secure WiFi Router - 'BLE' Command Injection (PoC)

PoC command injection in BLE service of Norton Core Secure WiFi Router CVE-2018-5234 For more information read paper. To demonstrate the exploitation, we will use: - OS GNU/Linux; - Bluetooth dongle adapter; - BlueZ utility for testing Bluetooth connection. In order to use the script, we will nee...

CVE-2018-5234

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software...

CVE-2018-5234

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software...

CVE-2018-5234

The CVE-2018-5234 entry concerns Norton Core Secure WiFi Router prior to version 237 vulnerable to a command-injection via BLE. Connected materials provide a PoC demonstrating a BLE service command-injection that can yield root access (SSH) to the device, after restarting the router and running a...