{"id":741,"date":"2013-12-12T00:24:50","date_gmt":"2013-12-11T23:24:50","guid":{"rendered":"http:\/\/www.floyd.ch\/?p=741"},"modified":"2023-05-31T08:09:31","modified_gmt":"2023-05-31T07:09:31","slug":"tincd-metasploit-module-and-exploit-development","status":"publish","type":"post","link":"https:\/\/www.floyd.ch\/?p=741","title":{"rendered":"Tincd Metasploit module and exploit development"},"content":{"rendered":"

A friend of mine wrote a Proof of Concept exploit for the tincd server (a VPN software) for authenticated peers (post-auth), the original blog post about it can be found here<\/a>. I turned the PoC crash into a weaponized exploit for Windows XP, Windows 7 and FreeBSD. I think very often the exploits on exploit-db.com do not contain a lot of information to reproduce the exploit development and a lot of “reversing” of “some hex bytes” is necessary to fully understand it. Therefore I provide several more detailed scripts in different programming languages with comments here. The vulnerability\/my exploit\/the software has the following characteristics:<\/p>\n