netanelc305/wondershellProof-of-concept exploit for CVE-2021-44595 and CVE-2021-44596 in Wondershare Dr.Fone, enabling remote code execution as SYSTEM via vulnerable services.
Netanel Cohen and Tomer Peled a Security Researchers from BugSec.
POC example to exploit Wondershare Dr.Fone .
Dr.Fone is a phone toolkit develop by wondershare , and vulnerable to RCE.
Only with network access we manage to execute remote code as SYSTEM user.
Vulnerable services:
InstallAssistService.exe
ElevationService.exe
Tested on versions : 12.0.7 , 11.4
Change ip and port and execute.
stty raw -echo; (stty size; cat) | nc -lvnp 1338
./ElevationServiceRCE.py
nc -lvnp 1337
./InstallAssistServiceRCE.py