CVE-2017-7494 PoC — Samba 安全漏洞

Source

https://github.com/betab0t/cve-2017-7494

Associated Vulnerability

Title:Samba 安全漏洞 (CVE-2017-7494)
Description:Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

Description

Proof-of-Concept exploit for CVE-2017-7494(Samba RCE from a writable share)

Readme

# Basic Setup

## Install Samba version 4.5.9
* https://download.samba.org/pub/samba/stable/samba-4.5.9.tar.gz
* https://wiki.samba.org/index.php/Build_Samba_from_Source

## Get patched version of Impacket
`pip install -r requirements.txt`


# Usage
1. Start Samba server in interactive mode + debug print

`sudo /home/ubuntu/samba-4.5.9/bin/smbd -i --debuglevel=10 --configfile=/etc/samba/smb.conf`

2. Copy **[libpoc.so](payload/bin/libpoc.so)** to target share
3. HAVE FUN!

`exploit.py -t x.x.x.x -m /path/to/libpoc.so`

# Notes
* liked this project? visit us at http://www.intezer.com | @IntezerLabs(twitter)

![Screenshot](screenshot.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!