绿坝远程缓冲区溢出漏洞

ご倾城↘恋

“绿坝”是一个用于监测和反色情的软件，我国政府推广的 。在7月1日，将被迫安装在所有新的中国（公共）电脑上，现在中国已经有5000万份安装。
English：
"Green Dam" is a software used for monitoring and anti-pornography, popularizing by
Chinese goverment. After July 1st, it will be forced to install on all new Chinese PCs.
Now it already has 50 million copies in China.
In order to monitor the URL that user is exploring, Green Dam injected the browser
process. When Green Dam is trying to handle a long URL, a stack overflow will occur in the
browser process.
This exploit can be used for exploitation on IE, on those computers installed Green Dam.
I used the .net binary to deploy shellcode, for it`s more stable than Heap Spray, and able
to bypass DEP and ASLR on Vista.
The exploit page contains a .net control, so it should be published on IIS.
                                                                                 

溢出的方法完全通用
shellcode SP2
Exploit down

wds

你以为最酸的感觉是吃醋吗？不是，最酸的感觉是没权吃醋。