CVE-2019-3980

This PoC exploits CVE-2019-3980 in Dameware Remote Support to achieve remote code execution by uploading and executing a custom C# executable via a Python script that handles communication and command execution.

This repository contains a C++ PoC exploit for CVE-2019-3980, a vulnerability in SolarWinds Dameware Remote Support. The exploit leverages a modified OpenSSL library to perform a Diffie-Hellman key exchange with weakened parameters, enabling remote code execution.

This repository contains a functional proof-of-concept exploit for CVE-2019-3980, targeting OpenNetAdmin v18.1.1. The exploit leverages command injection via the `xajaxargs[]` parameter to achieve unauthenticated remote code execution, delivering a reverse shell.

This repository contains a functional Python exploit for CVE-2019-3980, an unauthenticated RCE vulnerability in SolarWinds Dameware MRC. The exploit implements the full protocol handshake to bypass smart card authentication and execute arbitrary payloads as SYSTEM.