Contains an exploit code of a SEH attack against the file sharing wizard 1.5.0 application and a report explaining the process
File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331.
SCORE = 9.8 (Critical)
Attack Machine - Kali Linux
Victim Machine - Windows 7
Vulnerable Application - File sharing wizard V 1.5.0
Reverse shell is bound to a specific IP, inorder to succesfully run the code replace the localhost and generate a new shell