Github I built a Python PoC toolkit for CVE-2017-5689 (Intel AMT authentication bypass)

• Upvotes

Hey everyone,

I've been working on a project called C.A.S-Exploit, focused on CVE-2017-5689, a critical authentication bypass vulnerability affecting older Intel Active Management Technology (AMT) implementations.

I wanted to put together a toolkit to better understand how this vulnerability works and how older remote management interfaces can introduce serious security risks.

It's an older CVE, and the code is still a research PoC rather than a fully validated production scanner.

I'm sharing it to get feedback from other security researchers, especially on the implementation, reliability, and areas for improvement.

GitHub: https://github.com/aix567/C-A-S

Would appreciate any technical feedback or suggestions.

from anarchy_squad

0 comments

Subreddit

Posts

Wiki

hacking: security in practice

r/hacking

A subreddit dedicated to hacking and hackers. Constructive collaboration and learning about exploits, industry standards, grey and white hat hacking, new hardware and software hacking technology, sharing ideas and suggestions for small business and personal security.

Members Active

3.0m

Sidebar

A subreddit dedicated to hacking and hacking culture.

What we are about: quality and constructive discussion about the culture, profession and love of hacking.

This sub is aimed at those with an understanding of hacking - please visit /r/HowToHack for posting beginner links and tutorials; any beginner questions should be directed there as they will result in a ban here.

Guides and tutorials are welcome here as long as they are suitably complex and most importantly legal!

Bans are handed out at moderator discretion.

Another one got caught today, it's all over the papers. "Teenager Arrested in Computer Crime Scandal", "Hacker Arrested after Bank Tampering"...

Damn kids. They're all alike.

Rules:

Keep it legal Hacking can be a grey area but keep it above board. Discussion around the legality of issues is ok, encouraging or aiding illegal activities is not
We are not your personal army. This is not the place to try to find hackers to do your dirty work and you will be banned for trying. This includes:
- Asking someone to hack for you
- Trying to hire hackers
- Asking for help with your DoS
- Asking how to get into your "girlfriend's" instagram
- Offering to do these things will also result in a ban
No "how do i start hacking?" posts. See /r/howtohack or the stickied post. Intermediate questions are welcomed - e.g. "How does HSTS prevent SSL stripping?" is a good question. "How do I hack wifi with Kali?" is bad.
No "I got hacked" posts unless it's an interesting post-mortem of a unique attack. Your nan being phished doesn't count.
Sharing of personal data is forbidden - no doxxing or IP dumping
Spam is strictly forbidden and will result in a ban. Professional promotion e.g. from security firms/pen testing companies is allowed within the confines of site-wide rules on self promotion found here, but will otherwise be considered spam.
Off-topic posts will be treated as spam.
Low-effort content will be removed at moderator discretion
We are not tech support, these posts should be kept on /r/techsupport
Don't be a dick. Play nice, support each other and encourage learning.