|
-
September 14th, 2002, 10:08 AM
#1
what i am talking about is somthing close to what eeye has released but that is only a little part of the flaw i am trying to tell everyone about.
(i found that flaw eeye has realesed when i tried to find one of help links eeye used in IRIS (you probebly know wat it is)it was somthing like irs:main\help.html)...
but the flaw i have found dose not just let you run a progie but read files,change files,force the target to delete all files for example on c:,New shell,direct access
to:
/root:windows
/system:windows/system
/cookies:windows/cookies
.......
till now i have found 31 direct links
i have used java script to force users into running active x controllers
crashed windows 2000 and xp by providing it with wrong link to root
disconnect users with just providing a broken link to nowhere
i am trying it on my university network to see if it can give root access or not
you guyz probebly know that i can not elaborate such thingz ,thats why i am not givin
enough info about the flaw.
so please stop pushin me and given me negetive anto points
i 'll make it public when ever i find all the ups and downs.
WELL mabe this place was not a good one to dicuss such thingz!!!
----------------------------------------------------------------------------------------------------------------------
I may not agree with what you say, but I will defend to the death your right to say it.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|