Monday, May 16, 2011

Exploit Development Made Easy with pvefindaddr

    Hi all,
    This tutorial aims to show the utility of the Immunity Debugger pycommand pvefindaddr.
    In this tutorial I’ll use a vulnerability in Chasys Media Player,
    To download the application: http://www.chachaslab.com/chasys_media.php
    For more information: Bypassing SafeSeh
    
    Triggering the vulnerability:
    When opening a malformed play list(m3u) the application crashes,
    We’ll use the following simple perl script to create the .m3u file: