CVE-2016-3116

This is a functional exploit for CVE-2016-3116, targeting Dropbear SSH's X11 forwarding vulnerability. It leverages malformed X11 forwarding requests to achieve arbitrary file read/write and command execution on vulnerable systems.

This exploit demonstrates a CRLF injection vulnerability in Dropbear SSH server's X11 forwarding feature, allowing authenticated users to inject arbitrary xauth commands via newline characters in the x11 cookie. This can lead to forced-command bypass, arbitrary file read/write, and information leakage.