CVE-2018-1160

This exploit leverages an authentication bypass vulnerability in QNAP Netatalk by overwriting the preauth_switch pointer, allowing unauthorized access to AFP services. It includes functions to list volumes, read/write files, and execute arbitrary commands.

This exploit demonstrates an authentication bypass vulnerability in Netatalk by overwriting the preauth_switch pointer, allowing unauthorized access to AFP services. It includes functions to list volumes, read/write files, and execute arbitrary commands on affected systems.

This exploit targets a buffer overflow in the AFP protocol implementation (CVE-2018-1160) by crafting malicious DSI and AFP packets to overwrite memory addresses and redirect execution flow. It sends a structured payload to trigger the vulnerability and achieve remote code execution.