Add crosschex buffer overflow exploit

[agalway-r7]

Adds new metasploit module that waits for broadcasts from Ainz CrossChex looking for new devices, and returns a custom packet, triggering buffer overflow.

Verification

Vulnerable software can be found here.

List the steps needed to make sure this thing works

• Start msfconsole
• use windows/misc/crosschex_device_bof
• set LHOST vboxnet0
• run
• Open CrossChex
• Navigate to Device > Add
• Select Search
• Verify payload executes correctly
• TODO: Document the thing and how it works (Example)

[agalway-r7]

Release notes

Adds a module that exploits a Buffer Overflow vulnerability in CrossChex. This module listens for a broadcast from CrossChex attempting to detect new Access Control devices, and responds with malicious code exploiting the Buffer Overflow and delivering a specified payload.