wchen-r7 / crush

I'm not an MPlayer, I just Crush a lot.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

crush

I'm not an MPlayer, I just Crush a lot.

This is a payload generator for exploiting LZO based multi-media players. The demonstration payloads target MPlayer2, as that application does not require more than one vulnerability to gain full remote code execution.

All other applications based on FFmpeg/Libav are exploitable, but require multiple vulnerabilities to disclose memory addresses, or to place data at certain locations in memory.

Use for testing or demonstration purposes only.

Don A. Bailey @InfoSecMouse https://www.securitymouse.com/vulnerability

About

I'm not an MPlayer, I just Crush a lot.

License:GNU General Public License v2.0