[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : MS Windows (LegitCheckControl.dll) Genuine Advantage Validation Patch
# Published : 2005-08-01
# Author : HaCkZaTaN
# Previous Title : Internet Download Manager <= 4.05 Input URL Stack Overflow Exploit
# Next Title : Solaris SPARC / x86 Local Socket Hijack Exploit
/*
Will be moved to tools section shortly /str0ke
Name: Windows Genuine Advantage Validation Patch
Copyright: NeoSecurityTeam
Author: HaCkZaTaN <hck_zatan@hotmail.com>
Date: 31/07/05 21:42
Description: LegitCheckControl.dll (1.3.254.0)
ú?????????????????????????????????????????????????????????????????????????????
3tt -==[N]eo [S]ecurity [T]eam Inc.==- tt3
à????????????????????????????????????????????????????????????????????????????ù
3°3 TiTLE : Windows Genuine Advantage Validation 3°3 3°?????????????????????????????????????????????????????????????????????????′°3
3°3 AUTHOR : HaCkZaTaN 3°3 ú?á????????????????????????????????????á???????????????????????????????????á??
3tt -==Information==- tt3 à????????????????????????????????????????????????????????????????????????????ù
3°3 3°3 3°3 LegitCheckControl.dll (1.3.254.0) 3°3 3°3 3°3
ú?á????????????????????????????????????á???????????????????????????????????á??
3tt -==Contact==- tt3
à????????????????????????????????????????????????????????????????????????????ù
3°3 3°3
3°3 [N]eo [S]ecurity [T]eam [NST]? - http://www.neosecurityteam.net/ 3°3
3°3 HaCkZaTaN <hck_zatan@hotmail.com> 3°3
3°3 Irc.GigaChat.Net #uruguay 3°3
3°3 3°3
ú?á????????????????????????????????????á???????????????????????????????????á??
3tt -==Greets==- tt3
à????????????????????????????????????????????????????????????????????????????ù
3°3 3°3
3°3 NST's Staff 3°3
3°3 erg0t 3°3
3°3 ][GB][ 3°3
3°3 Beford 3°3
3°3 LINUX 3°3
3°3 Heap 3°3
3°3 CrashCool 3°3
3°3 Makoki 3°3
3°3 And my Colombian people 3°3
3°3 3°3 ú?á????????????????????????????????????á???????????????????????????????????á??
3tt -==[N]eo [S]ecurity [T]eam Inc.==- tt3
à????????????????????????????????????????????????????????????????????????????ù
???? ???? ????????? ???????????
????? ?? ??? ?? ??? ??
?? ?????? ????????? ???
?? ???? ??? ???
???? ??? ????????? ?????
*/
#include <stdio.h>
typedef struct bytepair BYTEPAIR;
struct bytepair
{
long offset;
char val;
};
static const BYTEPAIR byte_pairs[3]= {
{0x2BE98, 0x33},
{0x2BE99, 0xC0},
{0x2BE9A, 0x90},
};
int main(int argc, char *argv[])
{
FILE *LegitCheckControl;
int i;
printf("nt±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±ün"
"t±??????????????????????????????????????????????????????????±?n"
"t±? ±?n"
"t±? [N]eo [S]ecurity [T]eam [N][S][T] ±?n"
"t±? [Windows Genuine Advantage Validation Patch] ±?n"
"t±? LegitCheckControl.dll (1.3.254.0) ±?n"
"t±? ±?n"
"t±? ??????? ??????? ???? ?? ?? ???? ???????????????? ±?n"
"t±? ??? ???? ?? ?? ??? ?? ??? ??? ??? ?? ?? ?? ??? ±?n"
"t±? ??? ? ??? ?? ?? ??? ?? ??? ??? ?? ??? ±?n"
"t±? ??? ? ??? ?? ?? ??? ???? ??? ??? ?? ??? ±?n"
"t±? ??? ? ???? ?? ??? ????? ??? ??? ?? ??? ±?n"
"t±? ??? ? ??? ?? ??? ??? ??? ??? ?? ??? ±?n"
"t±? ??? ? ??? ?? ??? ?? ??? ??? ??? ?? ??? ±?n"
"t±? ??? ??? ?? ?? ??? ? ?? ??? ??? ???? ??? ±?n"
"t±? ??? ?? ??? ??? ??? ??? ±?n"
"t±? ???? ??? ???? ???? ???? ???? ±?n"
"t±? ±?n"
"t±? [ HaCkZaTaN ..... ] ±?n"
"t±? [ Paisterist ..... ] ±?n"
"t±? [ Daemon21 ..... ] ±?n"
"t±? [ g30rg3_x ..... ] ±?n"
"t±? [ Http://WwW.NeoSecurityTeam.Net ] ±?n"
"t±? ±?n"
"t±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±?n"
"t ????????????????????????????????????????????????????????????nnn");
getchar();
LegitCheckControl = fopen("LegitCheckControl.dll", "r+");
if (LegitCheckControl == (FILE *)0)
{
printf("LegitCheckControl.dll not found. Aborting.nn");
printf("Hit <Enter> to quit.");
getchar();
return 1;
}
printf("Starting...n");
for (i = 0; i < 3; i++)
{
fseek(LegitCheckControl, byte_pairs[i].offset, SEEK_SET);
fwrite(&byte_pairs[i].val, 1, 1, LegitCheckControl);
}
fclose(LegitCheckControl);
printf("->Patch completed.nn");
printf("Done, enjoy...nn");
getchar();
return 0;
}
// www.Syue.com [2005-08-01]