SlicK Posted August 29, 2007 Report Posted August 29, 2007 Yahoo Messenger remote BOFAutor: SlicKData: 29 Aug 2007Website: http://www.rstcenter.comEmail: slick@rstcenter.comAtunci cand este initiat un transfer de fisiere pachetul trimis va contine un cod unic care identifica respectivul transfer.Daca transferul este oprit de la orice capat si victima inchide fereastra respectiva un nou pachet trimis cuacelasi cod unic va cauza crashuirea procesului "yahoomessenger.exe" al victimei.Victima TREBUIE sa inchida fereastra cu transferul altfel procesul nu va crashui.Exploit: http://www.rootb0x.com/0X0/ym78bug.rarTestat pe:7.0.0.437 (WinXP SP2)7.5.0.647 (WinXP SP2)8.1.0.209 (WinXP SP2)8.1.0.249 (WinXP SP2)8.1.0.401 (WinXP SP2)8.1.0.402 (WinXP SP2)8.1.0.415 (WinXP SP2)8.1.0.419 (WinXP SP2)Pe versiuni mai mici de 7 nu functioneazaGreets to vladiii&rentaEDIT: Am rezolvat problemele de logare. Linkul de download este acelasi Quote
nullbyte Posted August 29, 2007 Report Posted August 29, 2007 Dat is kool.. Thx re (That is cool)(Thanks buddy am scris ) Quote
Ras Posted August 29, 2007 Report Posted August 29, 2007 goog job slick!zicea si vladiii ceva in legatura cu Yahoo Messenger remote BOF.ma bag sa incerc programul tau Quote
MostWanteD Posted August 30, 2007 Report Posted August 30, 2007 zice logged in: nu se logheaza ( am id`u ala in lista )zice packet sent: daca nu`i logat, nu poate trimite, si totusi zice ca`i trimis Quote
Guest Nemessis Posted August 30, 2007 Report Posted August 30, 2007 Nici la mine nu merge. Slick vezi ca poate mai poti adauga niste servere prin care sa se conecteze. Quote
vladiii Posted August 30, 2007 Report Posted August 30, 2007 Incercati sa va conectat si pe:cs1.msg.dcn.yahoo.com:80cs2.msg.dcn.yahoo.com:80cs3.msg.dcn.yahoo.com:80etc.Pe astea ar trebui sa mearga ! Mie mi-a mers perfect ! Bafta !!! Si bravo SlicK ! :roll:LE: Slick, urmatorul obiectiv: executia de cod remote Quote
Guest Nemessis Posted August 30, 2007 Report Posted August 30, 2007 Neah, tot nu merge. O fi de la mine cine stie. Lasand toate astea la o parte, good work Slick! Quote
amprenta Posted August 30, 2007 Report Posted August 30, 2007 e o mica problema cu autentificarea pentru anumite id-uri , nu extrage corect acel challlenge string din pachetu primit de la server .. puteti incerca user dasvxcv, pass testpassword Quote
MostWanteD Posted August 30, 2007 Report Posted August 30, 2007 user dasvxcv, pass testpasswordit works Quote
virusz Posted August 31, 2007 Report Posted August 31, 2007 Testat pe 8.1.0.415 (WinXPSp2)mi se pare ca pe versiuni mai mici de 8 nu functioneaza.... mersi ! Quote
alien Posted September 1, 2007 Report Posted September 1, 2007 bestial!!!!!!! merge de rupe locu. esti cel mai tare Slick Quote
alien Posted September 1, 2007 Report Posted September 1, 2007 sti ce-ar fi mishto la prg asta? sa pui o lista sa pice toti din lista de mess. Quote
hackedss Posted September 1, 2007 Report Posted September 1, 2007 chiar ar fi marfa ... tare .. si stick stii tu am vb pe privat Quote
SlicK Posted September 5, 2007 Author Report Posted September 5, 2007 V2. Am mai rezolvat cateva buguri si am imbunatatit metoda de BOF, enjoy Download: http://www.rootb0x.com/0X0/ym78bug.rar Quote
candymanuu Posted March 22, 2008 Report Posted March 22, 2008 Victima TREBUIE sa inchida fereastra cu transferul altfel procesul nu va crashui.Exploit: .rootb0x.com/0X0/ym78bug.rarnu merge linku.. Quote
kynder Posted March 23, 2008 Report Posted March 23, 2008 se pareca e cazut hostingul cu totu' probabil cand isi va reveni va merge si downloadul. Quote
raz3k Posted April 9, 2008 Report Posted April 9, 2008 l-as pune eu sus undeva dar n-am de unde sa-l iau Quote
ApologetX Posted April 9, 2008 Report Posted April 9, 2008 sti ce-ar fi mishto la prg asta? sa pui o lista sa pice toti din lista de mess. te crezi pe mirc? Quote