-
February 26th, 2003, 02:36 PM
#1
Junior Member
insert a *.exe in html file
"We are delighted to learn that the original self-executing html file,
from June 1 2002 is now fixed with the most current of the many
patches for the Internet Explorer series of browsers. See:
http://online.securityfocus.com/archive/1/275126
Regrettably.
The following file is an html file comprising both scripting and an
executable [*.exe].
We inject scripting and an executable into the html file which is
designed to point back to the executable in the html file and execute it. Provided the html file is an html file, Internet Explorer 5.5 and
6.0 will execute it.
Because it is an html file proper, Internet Explorer opens it. The
scripting inside is then parsed and fired. That scripting is pointing
back to the same executable file with our original codebase object
from the year 2000 and because it is a self-executing html file, it
executes !
Tested IE5.5 and IE6. Fully self-contained harmless *.exe:
http://www.malware.com/html.exe.zip
Be aware of html files out there.
Key Words: Trust it's Worthy so Think it's Tank silly obvious
--
http://www.malware.com"
QUESTION:
how translate the exe in base64 code? with a program ? scripts ?
best regards.
-
February 26th, 2003, 02:51 PM
#2
Member
Microsoft has already released a patch for this vulnerability.
It can be found here:
http://www.microsoft.com/technet/sec...n/MS00-046.asp
Have you filled out an ID-10-T or PEBKAK form lately?
-
February 26th, 2003, 06:32 PM
#3
Nice work of both of you.
-
February 26th, 2003, 06:55 PM
#4
doxical:: There´s a way to do it, quite easy. Use the (surprise) base64 program
http://www.fourmilab.ch/webtools/base64/
There´s a link to an *nix version and a windows one.
Found in a diary:
\".... and yes, since i am a l337 hax0r, i am also using vi to write this. ^[[D^[[B^ exit ^X^C quit :x :wq dang it :w:w:w :x ^C^C^Z^D\"
-
February 26th, 2003, 07:01 PM
#5
Junior Member
-
February 27th, 2003, 12:02 AM
#6
Member
Thanks ii-monk
Have you filled out an ID-10-T or PEBKAK form lately?
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|