April 12th, 2004, 05:04 PM
No hope for Windows.
There is simply no hope that Microsoft Windows will
ever get straightened out and work properly.
Maybe this is an old exploit, but I was ROFL at how
cute, and stupid this really is.
Test it on your own system. Find any executable EXE file.
make a copy of it like filename.txt.
Open a command prompt, (CMD.EXE) and type the filename
filename.txt And it executes! No need to fool with
double file extensions. CMD.EXE runs all executables
regardless of file name or extension because it analyzes
the contents of the file.
I came in to the world with nothing. I still have most of it.
April 12th, 2004, 05:45 PM
but I did try it and I'm immune.. I love my copy of win98se..
When you use a file name as a command at a command prompt or in a line of script, Windows NT-based operating systems (Windows NT, Windows 2000, Windows XP, Windows .NET)
invoke the CreateProcess function to open the file. If CreateProcess detects that the file is a binary image with an executable header, the file is run as a program.
April 12th, 2004, 07:52 PM
Work for me! Windows XP fully patch! Rename Regedit.exe to regedit.txt, when in cmd, ran regedit.txt and regedit open... Nice Bug.. But you have to open Cmd and them type manually the exe. Cannot be run from the shell so...
April 13th, 2004, 01:43 AM
But you can exploit a webserver to return a cmd.exe shell prompt. So once you're there...