uTorrent / BitTorrent WebIU 1.7.7/6.0.1 Range header Denial of Service exploit

Today i kinda got really bored, so i’ve decided to dig into some advisories and see what i can find
during my search i’ve found the following advisory
and since i didnt have anything better to do and it doesnt require much of a thinking
i came up with the following exploit:

#!/usr/bin/perl

# uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 [...]

Desert Scroll cypher

1. Overview:
Desert Scroll is an old project of mine which i wrote in perl couple of years ago
and basicly its an implementation of a Book encryption
2. How does it work:
2.1. Loading && Mapping the key file:
at first before every encryption/decryption of plain text a key is being loaded into the memory of the script/program and [...]

Testing Highlighted soruce code

Another dig into the depth of some binary in order to test the highlighted code

 

.text:28096173                 mov     esi, offset aLDevP2×8_82S_0 ; "L:\\dev\\p2x-8.82\\stubsrc\\NEWperllib.c"

.text:28096178                 push    esi             ; char *

.text:28096179                 push    offset boot_DynaLoader ; int

.text:2809617E                 push    offset aDynaloaderBoot ; "DynaLoader::boot_DynaLoader"

.text:28096183                 push    dword ptr [esp+14h] ; int

.text:28096187                 call    Perl_newXS

.text:2809618C                 push    esi             ; char *

.text:2809618D                 push    offset win32_free_childenv ; int

.text:28096192                 push    [...]

« go back