jrandomsage / cve-2017-8759

CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.

CVE-2017-8759 Weaponisation PoC

This repository contains data that can be used to weaponise the CVE-2017-8759 vulnerability.

For full information visit https://www.mdsec.co.uk/blog/ to find the post related to this vulnerability.

As always, my research is aimed to help the community become more aware of rising threats as well as the adversary simulation community to better simulate realistic threats against our client base in order to better educate and inform them. My research should not be used against a target without prior consent.

Video for weaponisation can be found at https://www.youtube.com/watch?v=hlkx5uYBT1Y

Credits

Credits to myself, Vincent Yiu @vysecurity for the weaponisation in RTF form with no interaction required. Credits to @voulnet for the exploit.txt.