extract75-cve-2020-13995

针对 CVE-2020-13995 的控制流劫持利用 构建： root@kitploit: make 运行： root@kitploit: make run 进行 Mayhem 模糊测试： root@kitploit: docker tag extract75-cve-2020-13955 /extract75-cve-2020-13955 docker push /extract75-cve-2020-13955 mayhem run --image /extract75-cve-2020-13955 \ --project /extract75 . （默认运行时间为600秒；可通过...

CVE-2020-13995

U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable sBuffer leads to a Write-What-Where outcome. Writing beyond sBuffer will clobber most global variables until reaching a pointer such as DESinfo or imageinfo...