0x00string/oldays

public exploits

oldays's Issues

NameError: global name 'udpsock' is not defined

Hi,

Trying to use this script, but I don`t seem to find in which module the udpsock function is defined, its not in socket, nor any other imported modules int he script, nor defined in the script itself. When trying to run the script it fails.

Traceback is this:

File "cups-exploit.py", line 528, in
main()
File "cups-exploit.py", line 508, in main
printer = locatePrinters(rhost, rport)
File "cups-exploit.py", line 138, in locatePrinters
response = txrx(rhost, int(rport), "udp", request)
File "cups-exploit.py", line 124, in txrx
sock = udpsock()
NameError: global name 'udpsock' is not defined

CVE-2015-1158 hardcoded CUPS server IP

https://github.com/0x00string/oldays/blob/master/CVE-2015-1158.py#L232
There should be blah2 = txrx(rhost,rport,"tcp",sendJobRequest) instead of blah2 = txrx("172.20.32.3",631,"tcp",sendJobRequest)

.so payload question

Hello, first thanks for your great work!

I have a quick question regarding the .so payload this exploit is expecting, if I create a normal txt file with the name exploit.so and the content is:

#!/bin/bash
<reverse shell here>

will that work? or I need to create an actual .so payload using msfvenom?

Thank you!

CVE-2015-1158 bug on locating available printers

Hi, I tried you exploit for CUPS but when I try to run it I got an error:

python cups.py -a 141.250.25.12 -b 3334 -c /tmp/x86reverseshell.so

[*] locate available printer
Traceback (most recent call last):
File "cups.py", line 523, in
main()
File "cups.py", line 503, in main
printer = locatePrinters(rhost, rport)
File "cups.py", line 146, in locatePrinters
return printer
UnboundLocalError: local variable 'printer' referenced before assignment

.so payload

I never heard about .so payload. How can I create an .so reverse shell? I also suggest to include an example .so file.

error in seedTarget method

Hi, I tried you exploit for CUPS but when I try to run it I got an error:

python exp.py -a example.com -b 631 -c ./so.so

Traceback (most recent call last):
  File "exp.py", line 527, in <module>
    main()
  File "exp.py", line 516, in main
    jobid = seedTarget(rhost, rport, printer, payload)
  File "exp.py", line 220, in seedTarget
    "\x03"+
UnboundLocalError: local variable 'jobid' referenced before assignment