Teamserver-Client: Reliably crash Teamserver client through Scripting Console
Issue: When interacting with the scripting console on a Teamserver client, it is possible to reliably crash the Teamserver client application by submitting input with () appended.
Reproduction:
- Launch teamserver client
- Connect to teamserver
- Open Script console
- Enter the string
help() - Script console will become unresponsive, and you must kill the process for it to close.
Output from teamserver client console is as follows:
[20:48:11] [error] [DB] Couldn't query Scripts: No query Unable to fetch row
Traceback (most recent call last):
File "<string>", line 1, in <module>
NameError: name 'check' is not defined
Traceback (most recent call last):
File "<string>", line 1, in <module>
NameError: name 'pease' is not defined
Traceback (most recent call last):
File "<string>", line 1, in <module>
NameError: name 'please' is not defined
^C[20:51:21] [info] Havoc Application status: 0
Resolution: When entering commands into the script console, unexpected or malformed input is disregarded and safely handled.
This should be resolved properly but Ill still say that an error-handler is a good idea regardless, so https://github.com/HavocFramework/Havoc/issues/137 is related.
As far as i know this issue still is there and i gotta take a look on how to resolve that since its related to the python intepreter.