CVE-2020-9273

This machine will cover a Samba share, manipulating version of proftdpd to gain initial access and escalate your privileges to root via an SUID binary. This a writeup for the machine on TryHackMe.

Kenobi Summary This machine will cover a Samba share, manipulating version of proftdpd to gain initial access and escalate your privileges to root via an SUID binary Initial questions about machine What exactly is a Samba share? How has it been attacked in real life? What is proftpd? Samba Share Samba is kinda like the interpreter between linux and unix based machines Samb

PoC exploits for software vulnerabilities

CVE Exploit PoC's PoC exploits for multiple software vulnerabilities Current exploits CVE-2019-18634 (LPE): Stack-based buffer overflow in sudo tgetpassc when pwfeedback module is enabled CVE-2021-3156 (LPE): Heap-based buffer overflow in sudo sudoersc when an argv ends with backslash character CVE-2020-28018 (RCE): Exim Use-After-Free (UAF) in tls-opensslc leading t

Analysis and exploitation of an use-after-free in ProFTPd

CVE-2020-9273 These are the files I created during analysis and exploitaion of CVE-2020-9273 - a heap use-after-free in ProFTPd Take a look at the exploit video here Description about the files in this repo: poc-not-really-v4c - an article and poc I wrote last year (oct/2020), read to understand the exploitation path; exploit_democ - demo exploit released, with hardcoded ad