Avatar tweaks | Make anyone crash just by clicking you :D ||| OLD THREAD

[ehthe]

New thread at https://forum.r4p3.net/threads/avatar-tweaks-make-anyone-crash-just-by-clicking-you-d.308/

get hyped !

Plugin window screenshot on Linux

Plugin menu screenshot on Linux

Updated plugin menu screenshot on Windows

Not yet released.
The price of the tool will be between 0.1btc and 3btc(high volatility) and may come in different versions (basic, just the crash and custom for example). Nothing is decided at the moment.

 

[ehthe]

Not yet. I need to correctly finish it. And I'll add some huge png too

 

[hASVAN]

ok good luck and keep the good work

 

[ehthe]

Right now I'm trying to understand how the client fetches the file to be uploaded. It works sporadicly.

The way the images are fetched is now fixed.
Does anyone have some broken/malformed/hugeres img that the client normally wouldn't accept ?

 

[Asphyxia]

Right now I'm trying to understand how the client fetches the file to be uploaded. It works sporadicly.

That's fucking amazing

The way the images are fetched is now fixed.
Does anyone have some broken/malformed/hugeres img that the client normally wouldn't accept ?

http://entropymine.com/jason/bmpsuite/bmpsuite/html/bmpsuite.html some of these images should do the trick --- a lot of these are NOT accepted by the client. Most specifically try these ones:
http://entropymine.com/jason/bmpsuite/bmpsuite/b/reallybig.bmp
http://entropymine.com/jason/bmpsuite/bmpsuite/b/badwidth.bmp

 

[ehthe]

Thank you very much

 

[Asphyxia]

Thank you very much

You are welcome, I hope it works.

 

[ehthe]

Well I got some results with http://entropymine.com/jason/bmpsuite/bmpsuite/b/reallybig.bmp and http://entropymine.com/jason/bmpsuite/bmpsuite/b/rletopdown.bmp
If you have any more links like this I'm still looking for more weirdness x)

 

[Asphyxia]

Does this one: https://bugreports.qt.io/secure/attachment/46674/BBF7096DCAF1CD03DE8364E14DB58939.BMP not work?
This whole zip has BMP files for fuzzing/stressing a BMP engine: http://entropymine.com/jason/bmpsuite/bmpsuite-2.3.zip
Other than that I could only think of trying to figure out how QT reads a BITMAP, then figuring out what sort of math we would need to happen for us to cause an error/issue to exploit.. then try to craft a BMP for that.

 

[ehthe]

Added some more teasing to the main post.
And of course the crashbmp works

 

[Asphyxia]

Hooray, that is freaking amazing.
Here are some crazy jpg files: https://code.google.com/p/imagetest...?name=imagetestsuite-jpg-1.00.tar.gz&can=2&q=
Here is for testing png: http://www.schaik.com/pngsuite/
I will look for more test suites, they seem to be pretty useful.

 

[ehthe]

Those are indeed crazy jpegs. Just by looking at them my computer crashed x)

 

[Bluscream]

Hahaha

 

[Asphyxia]

Those are indeed crazy jpegs. Just by looking at them my computer crashed x)

I am sorry about that haha... it would be funny if they made someone else's computer crash if they viewed your avatar.

Here are some more image test suites:
GIF: https://code.google.com/p/imagetestsuite/downloads/detail?name=imagetestsuite-gif-1.00.tar.gz
PNG: https://code.google.com/p/imagetestsuite/downloads/detail?name=imagetestsuite-png-1.01.tar.gz
ICO: http://sourceforge.net/projects/freeimage/files/Test Suite (graphics)/2.5.0/ico.zip/download?use_mirror=iweb
JP2: http://www.gwg.nga.mil/ntb/baseline/software/testfile/Jpeg2000/jpeg2k.htm
MNG&PNG: http://libmng.com/MNGsuite/
TGA: https://github.com/mike-lischke/GraphicEx/tree/master/TestSuite original/TGA
Here are some interesting images to play with, check out the problems folders: https://github.com/mike-lischke/GraphicEx/tree/master/TestSuite original
TIFF: https://code.google.com/p/imagetestsuite/downloads/list
XBM: https://github.com/mike-lischke/GraphicEx/tree/master/TestSuite original/XBM

This is a lot of information, have fun haha.

 

[ehthe]

Here's a simple list of format that ts *should* support : http://doc.qt.io/qt-5/qimage.html#reading-and-writing-image-files
So no .ico support :/

 

[ehthe]

I tested a bunch of pngs and gif. The gif decoder will eat anything you throw at him. The png decoder on the other hand is nitpicking and throwing errors.
In conclusion the most promising formats should be bmp and jpeg. We'll see.

 

[newnameplz]

Well I got some results with http://entropymine.com/jason/bmpsuite/bmpsuite/b/reallybig.bmp and http://entropymine.com/jason/bmpsuite/bmpsuite/b/rletopdown.bmp
If you have any more links like this I'm still looking for more weirdness x)

There's always this timeless classic: http://vignette3.wikia.nocookie.net...est/scale-to-width-down/480?cb=20101126062631

(also if you got warned for no reason that's my fault, I was a bit of a klutz)

EDIT: argh, that's scaled down, use this
http://vignette3.wikia.nocookie.net/twilightsaga/images/d/dc/Huge3.jpg

(and apparently warning is a multistage process so I didn't do anything, phew)

 

[ehthe]

http://www.aerasec.de/security/advisories/decompression-bomb-vulnerability.html

 

[ehthe]

Edited the OP to update the screenshots. Also concerning the malformed imgs the limit is 200kB. So there's few jpegs possible x)

 

[Bluscream]

Would you mind sharing your source to Github when its ready for the public section?