Help getting this to run on "Frankenstein" VM? about exploit-cve-2016-10033 HOT 9 CLOSED

@braimee
If you're just doing it for a demo, here's a Metasploit module that should be easier to set up.
https://github.com/rapid7/metasploit-framework/pull/7768?utm_content=43350703&utm_medium=social&utm_source=twitter

from exploit-cve-2016-10033.

Thanks @benichmt1 , I appreciate that. I'll look into it. Just moments before receiving your reply I tried https://legalhackers.com/videos/PHPMailer-Exploit-Remote-Code-Exec-Vuln-CVE-2016-10033-PoC.html and mirroring this setup worked tenaciously. So I'm good to go with my PoC for the talk. Thanks again!

from exploit-cve-2016-10033.

@braimee Hello there! I do the steps and your almost, but that is unsuccessful! Would like to ask what you have done a successful operation of the key! Thank you!

from exploit-cve-2016-10033.

Hi @wpaisk can you be a bit more specific on your issue? I basically went to http://pwnscriptum.com/, downloaded the sample vulnerable contact form and staged it on a local VM, then attacked using the exploit.

from exploit-cve-2016-10033.

@braimee what i've done:

1. Copy all files to kali under / var / www / html /
2. Download the exploit file: PwnScriptum_RCE_exploit.py
3. The use of loopholes, being given
4. The specific error is: [!] Something went wrong ... Got error: [404]
   Try another dir? Push through, do not give up! :) and the cache file could not create！

from exploit-cve-2016-10033.

@braimee I have tried several virtual machines, but seemingly not! Can not create cache file

from exploit-cve-2016-10033.

@wpaisk sorry for the delay, I'll be spinning up this VM again today and will look further at my config and post more details.

from exploit-cve-2016-10033.

Ok so my test vulnerable VM has the attached page served up in Apache root. Note I uncommented this line:

require 'PHPMailer-5.2.17/PHPMailerAutoload.php';

Then, in /var/www/html I have the PHPMailer-5.2.17 folder, which the index.html references. That's about it. Does that help?

from exploit-cve-2016-10033.

@braimee you can open the Dockerfile and read it's contents, just execute that by hand in a Debian linux, and you will get the very same result.

from exploit-cve-2016-10033.