Reverse Shell Exploit Script

This Python script exploits a buffer overflow vulnerability in a web application running on 192.168.100.24:8081. By crafting a malicious HTTP POST request, the script sends a payload designed to execute a reverse shell on the target system.

WARNING

This script is intended for educational purposes only. Use it responsibly and only on systems you own or have explicit permission to test. Unauthorized use is illegal and unethical.

Features

• Buffer Overflow Exploit: Exploits a buffer overflow in the web application’s login functionality.
• Reverse Shell Payload: Sends a reverse shell payload that connects back to the attacker’s system.

How It Works

1. Buffer Overflow: Sends a crafted payload that overwrites the stack and redirects execution to the malicious payload.
2. Return Address Overwrite: Overwrites the return address with a memory address pointing to a NOP sled and payload.
3. Payload Execution: Executes the reverse shell payload (buf), which connects back to the attacker's system.

Prerequisites

• Python 3: The script requires Python 3.
• Network Access: Ensure connectivity to the target system (192.168.100.24:8081).

Usage

1. Set Up the Listener:

   Start a listener on your attacking machine to capture the reverse shell connection. Use a tool like nc (Netcat):

   nc -lvnp 443

2. Run the Exploit:

   Execute the script on your attacking machine:

   python3 exploit.py

Payload Structure

• Offset: Fills the buffer with b"A" * 780 to reach the return address.
• Return Address: Overwrites the return address with b"\x83\x0C\x09\x10".
• NOP Sled: Adds b"\x90" * 32 NOP instructions for reliable payload execution.
• Reverse Shell: A Metasploit-generated payload (buf) to open a reverse shell.

Legal Disclaimer

This script is intended for educational purposes only. The author does not take responsibility for any damages caused by the misuse of this script. Always ensure you have explicit permission before testing systems for vulnerabilities.

Author

Written by tyto.