Need Help With Python Codes!!!

[LordAzelion]

Hi, im currently facing a problem with some python codes i need to run for my assignments. Basicaly i need to recreate a vulnerabilities called openvpn dos (more info here: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7478). After some searching i find some codes that supposedly do the exploit, but it is on python which im not familiar with (https://www.exploit-db.com/exploits/41993/). Can someone with python knowledge help me understand the code, because upon running it i encountered some errors.

[vorticalbox]

6 hours ago, LordAzelion said:

Hi, im currently facing a problem with some python codes i need to run for my assignments. Basicaly i need to recreate a vulnerabilities called openvpn dos (more info here: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7478). After some searching i find some codes that supposedly do the exploit, but it is on python which im not familiar with (https://www.exploit-db.com/exploits/41993/). Can someone with python knowledge help me understand the code, because upon running it i encountered some errors.

You set host and port at the top then python filename.py. 

[LordAzelion]

13 hours ago, vorticalbox said:

You set host and port at the top then python filename.py. 

i tried doing that but it doesnt do anything to the server. I setup a virtual machine environment with the server running off ubuntu 17.04. when i check using the service openvpn status it says it still active..

 

[vorticalbox]

17 minutes ago, LordAzelion said:

i tried doing that but it doesnt do anything to the server. I setup a virtual machine environment with the server running off ubuntu 17.04. when i check using the service openvpn status it says it still active..

 

Quote

Note that this issue is fixed in 2.3.15 and 2.4.2.

You could be running a patched version if you enabled updates while installing

[LordAzelion]

10 minutes ago, vorticalbox said:

You could be running a patched version if you enabled updates while installing

i have make sure that the installed instance are the 2.4.0. i seems to have found that he problems might be on the firewall settings. i have set some rules using iptables and ufw but still cannot connect to the server. in the client side it will say connection refused. using nc -v ip port command also returns blocked onnection.

[vorticalbox]

4 hours ago, LordAzelion said:

i have make sure that the installed instance are the 2.4.0. i seems to have found that he problems might be on the firewall settings. i have set some rules using iptables and ufw but still cannot connect to the server. in the client side it will say connection refused. using nc -v ip port command also returns blocked onnection.

as you're running in a  VM it might be blocking connections in or you might have it running on a different subnet.