CVE-2016-5639 PoC — Crestron AirMedia AM-100 目录遍历漏洞

Source

https://github.com/xfox64x/CVE-2016-5639

Associated Vulnerability

Title:Crestron AirMedia AM-100 目录遍历漏洞 (CVE-2016-5639)
Description:Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter.

Description

Crestron AirMedia AM-100 Traversal and Hashdump Metasploit Modules

Readme

# CVE-2016-5639
Crestron AirMedia AM-100 Traversal and Hashdump Metasploit Modules

Two similar modules that take advantage of CVE-2016-5639 to dump hashes and retrieve files through path traversal. I made these modules separate because I wanted experience writing something that could "dump" hashes, correctly format them for cracking, and add them to the loot. Any suggestions welcome.


All credit for the original exposure and writeup of the vulnerabilities should go to Cylance, I guess:
https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2016-05-001.md

File Snapshot


 [4.0K]  /data/pocs/809b998f72d73a002d55452f31280bbdddee3aaa
├── [4.7K]  crestron_airmedia_hashdump.rb
├── [3.0K]  crestron_airmedia_traversal.rb
└── [ 576]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!