ELIDESKEW

[tosepf]

Hi,

Can someone help me, where can i find elideskew.pl script which is used in ELIDESKEW ???

Thanks

[doomguy]

@tosepf My bet is you won't find it, as the file was not released by TheShadowBrokers. However, as stated in the file you mentioned, the elideskew.pl is using a publicly known RCE vulnerability which was fixed in 1.4.8. The funny thing is: there is no RCE mentioned on http://squirrelmail.org/security/ - just an LFI, Maybe they were able to upgrade the LFI to RCE.

If you want this exploit, you need to reverse it yourself. Grab the source for 1.4.7 and 1.4.8, make a diff and try to understand the differences in the code and why they introduced them. From there you might be able to craft a working exploit.

[doomguy]

You could try to combine the information from those two sites to achieve your goal:

• https://www.exploit-db.com/exploits/27948/
• http://resources.infosecinstitute.com/local-file-inclusion-code-execution/