I found that a website is using a version of telerik web ui that may be vulnerable to cve-2017-9248.

However when i use the python script with command

python script.py -k https://www.website.com/Telerik.Web.UI.DialogHandler.aspx 48 hex 9

The script starts but it's not moving from the first key. It keeps trying to retrieve the first key

`to find key of length [48] with accuracy threshold [9] using key charset [01234567890ABCDEF]

Key position 01: (E) [A]`

Does that mean that the website is not vulnerable or the version of Telerik is no more vulnerable?

The version should be: 11.1.6827.0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.