CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.
Switch branches/tags
Nothing to show
Clone or download
Latest commit afa34ec Sep 14, 2017
Permalink
Failed to load latest commit information.
README.md Update README.md Sep 14, 2017
blob.bin Add content Sep 13, 2017
exploit.txt Add content Sep 13, 2017

README.md

CVE-2017-8759 Weaponisation PoC

This repository contains data that can be used to weaponise the CVE-2017-8759 vulnerability.

For full information visit https://www.mdsec.co.uk/blog/ to find the post related to this vulnerability.

As always, my research is aimed to help the community become more aware of rising threats as well as the adversary simulation community to better simulate realistic threats against our client base in order to better educate and inform them. My research should not be used against a target without prior consent.

Video for weaponisation can be found at https://www.youtube.com/watch?v=hlkx5uYBT1Y

Credits

Credits to myself, Vincent Yiu @vysecurity for the weaponisation in RTF form with no interaction required. Credits to @voulnet for the exploit.txt.