Advertisement
syrobonkus
Dec 30th, 2024
434
3
Never
This is comment for paste Mog
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Thanks for enabling comments!
  2. Various reasons this is garbage:
  3. - Executing shellcode without bypassing DEP
  4. - Saying to 'just jump to system()' without having an ASLR leak
  5. - 7zip doesn't even open this, you get "Error: Is not archive"
  6. - Includes 9 different header files and uses none of them except 7zip's types
  7. - Igor Pavlov (the creator of 7zip) does not believe this vulnerability exists
  8. - The 'shellcode' is complete garbage. I compiled the program and had it print the shellcode (since it modifies it), here's it in assembly:
  9. push rbp
  10. mov ebp,esp
  11. sub esp,0x8
  12. mov DWORD PTR [rsp],0x636c6163
  13. add ah,cl
  14. int3
  15. int3
  16. .byte 0x89
  17. .byte 0x83
  18. rex.W
  19. rex
  20.  
  21. Please proceed to ignore anything else this guy posts,
  22. - a real exploit developer
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement