Menu

#55 Faking Client Version...

open
nobody
None
5
2003-07-31
2003-07-31
No

Tried to fix it myself but failed - any help is welcome like
hell ;)

Problem routine and function

bool Injection::handle_client_version(uint8 * buf, int
size)
sprintf(myver,"\xbd\0%c%s",n,VerFakeT);

the stream:

-------------------- client Client Version
0000: bd 00 0a 33 2e 30 2e 37 65 00 -- -- -- -- -- --
...3.0.7e.
Faking version to 3.0.7e:
0000: bd 00 00 00 cb 15 53 2f 10 -- -- -- -- -- -- --
......S/.
-------------- injection to server Client Version
0000: bd 00 00 00 cb 15 53 2f 10 -- -- -- -- -- -- --
......S/.

faking to same version produces completly different hex
stream.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB