insert a *.exe in html file
Results 1 to 6 of 6

Thread: insert a *.exe in html file

  1. #1
    Junior Member
    Join Date
    Jan 2003
    Posts
    3

    insert a *.exe in html file

    "We are delighted to learn that the original self-executing html file,
    from June 1 2002 is now fixed with the most current of the many
    patches for the Internet Explorer series of browsers. See:

    http://online.securityfocus.com/archive/1/275126

    Regrettably.

    The following file is an html file comprising both scripting and an
    executable [*.exe].

    We inject scripting and an executable into the html file which is
    designed to point back to the executable in the html file and execute it. Provided the html file is an html file, Internet Explorer 5.5 and
    6.0 will execute it.

    Because it is an html file proper, Internet Explorer opens it. The
    scripting inside is then parsed and fired. That scripting is pointing
    back to the same executable file with our original codebase object
    from the year 2000 and because it is a self-executing html file, it
    executes !

    Tested IE5.5 and IE6. Fully self-contained harmless *.exe:

    http://www.malware.com/html.exe.zip

    Be aware of html files out there.

    Key Words: Trust it's Worthy so Think it's Tank silly obvious

    --
    http://www.malware.com"


    QUESTION:
    how translate the exe in base64 code? with a program ? scripts ?

    best regards.

  2. #2
    Member
    Join Date
    Oct 2002
    Posts
    65
    Microsoft has already released a patch for this vulnerability.
    It can be found here:
    http://www.microsoft.com/technet/sec...n/MS00-046.asp
    Have you filled out an ID-10-T or PEBKAK form lately?

  3. #3
    Nice work of both of you.

  4. #4
    Member
    Join Date
    Dec 2002
    Posts
    88
    doxical:: There´s a way to do it, quite easy. Use the (surprise) base64 program
    http://www.fourmilab.ch/webtools/base64/
    There´s a link to an *nix version and a windows one.

    Found in a diary:
    \".... and yes, since i am a l337 hax0r, i am also using vi to write this. ^[[D^[[B^ exit ^X^C quit :x :wq dang it :w:w:w :x ^C^C^Z^D\"

  5. #5
    Junior Member
    Join Date
    Dec 2001
    Posts
    8
    good stuff

  6. #6
    Member
    Join Date
    Oct 2002
    Posts
    65
    Thanks ii-monk
    Have you filled out an ID-10-T or PEBKAK form lately?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides