μTorrent (uTorrent) 2.0.3 – DLL Hijacking

• Exploit Database
• 13 阅读

• 作者： Dr_IDE
  日期： 2010-08-25
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/14748/

• ###########################################################################
  #
  # Title: 	uTorrent <=2.0.3 Dll Hijacking Local Exploits
  # By:		Dr_IDE
  # Tested:	Windows 7RC
  # Note:		These are additional DLL's with unsafe Load Paths
  # Reference:	http://www.exploit-db.com/exploits/14726/
  #
  ############################################################################
  
  If the payload .DLL file is renamed to any of these files and placed in the 
  utorrent.exe directory, the payload will be executed with users' credentials.
  
  	-userenv.dll
  
  	-shfolder.dll
  	
  	-dnsapi.dll
  
  	-dwmapi.dll
  
  	-iphlpapi.dll
  
  	-dhcpcsvc.dll
  
  	-dhcpcsvc6.dll
  
  	-rpcrtremote.dll
  
  https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14748.tar.gz (Dr_IDE.bind.dll.tar.gz)
  
  #[pocoftheday.blogspot.com]