Sploitus

Exploit for CVE-2024-26169-Detail-1

kitploit ยท 2026-08-25

Exploit Code

MARKDOWN17 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-KAUTILYAGUPT-CVE-2024-26169-DETAIL-1
# CVE-2017-11882-metasploit

๋‹ค์Œ POC๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ CVE-2017-11882๋ฅผ ์ต์Šคํ”Œ๋กœ์ž‡ํ•˜๋Š” Metasploit ๋ชจ๋“ˆ์ž…๋‹ˆ๋‹ค:

https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about.

## ์„ค์น˜

  1. cve_2017_11882.rb๋ฅผ /usr/share/metasploit-framework/modules/exploits/windows/local/๋กœ ๋ณต์‚ฌํ•˜์‹ญ์‹œ์˜ค.
  2. cve-2017-11882.rtf๋ฅผ /usr/share/metasploit-framework/data/exploits/๋กœ ๋ณต์‚ฌํ•˜์‹ญ์‹œ์˜ค.



์ด ๋ชจ๋“ˆ์€ Metasploit์œผ๋กœ์˜ ๋น ๋ฅธ ํฌํŠธ์ด๋ฉฐ, mshta.exe๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ํŽ˜์ด๋กœ๋“œ๋ฅผ ์‹คํ–‰ํ•ฉ๋‹ˆ๋‹ค.

์ด ๋ชจ๋“ˆ๊ณผ ์ต์Šคํ”Œ๋กœ์ž‡์„ ๊ตฌํ˜„ํ•˜๋Š” ๋” ์ข‹์€ ๋ฐฉ๋ฒ•์ด ์žˆ์ง€๋งŒ, ์‹œ๊ฐ„์ด ๋‚˜๋Š” ๋Œ€๋กœ ์—…๋ฐ์ดํŠธํ•˜๊ฒ ์Šต๋‹ˆ๋‹ค.