国外黑客网站发布绿坝最新漏洞攻击程序

hua

Green Dam remote buffer overflow exploit

"Green Dam" is a software used for monitoring and anti-pornography, popularizing by Chinese goverment. After July 1st, it will be forced to install on all new Chinese PCs.
Now it already has 50 million copies in China.
In order to monitor the URL that user is exploring, Green Dam injected the browser process. When Green Dam is trying to handle a long URL, a stack overflow will occur in the browser process.

This exploit can be used for exploitation on IE, on those computers installed Green Dam.
I used the .net binary to deploy shellcode, for it`s more stable than Heap Spray, and able to bypass DEP and ASLR on Vista.
The exploit page contains a .net control, so it should be published on IIS.
---seer[N.N.U]

http://milw0rm.com/sploits/2009-green-dam.zip

zwzc

一个绿吧搞得大家都关注了啊  哈哈  继续关注

lcz99

是啊，总算做了个引起世人关注的软件，;19

小松鼠

原帖由 waynedean 于 2009-6-13 23:05 发表
转贴上来，in case the website will be blocked in the future,

具体有什么作用？