CVE-2020-3992

This repository contains proof-of-concept exploits for CVE-2019-5544 and CVE-2020-3992, both targeting VMware ESXi's OpenSLP service. The exploits leverage heap overflow and memory corruption vulnerabilities to potentially achieve remote code execution or denial of service.

This repository contains a Python script that scans for OpenSLP services, which may be vulnerable to CVE-2019-5544 and CVE-2020-3992. The script uses the Scapy library to send SLP protocol packets and detect services, but it does not exploit the vulnerabilities.

The repository contains a functional Python script that exploits CVE-2020-3992 by sending a crafted packet to a vulnerable VMware ESXi server on port 427. The exploit triggers a denial-of-service (DoS) condition by sending multiple malformed packets.