.. does either of theese 2 links popup a cmd.exe window for you? Absolutely harmless test.
http://www.signupsluts.com/ie.html
http://www.signupsluts.com/ie2.html
http://www.signupsluts.com/ie.html
http://www.signupsluts.com/ie2.html
-
2nd one popped up a window "attempting injection". -
first one loaded without problems, second one, same popup asPussyMan
Where are you testing it for?Comment
-
The first one is trying to use an exploit.
Comment
-
dittoOriginally posted by PussyMan
2nd one popped up a window "attempting injection"Comment
-
-
nah doesn't run itComment
-
ok, that wasn't it though. It tries to execute "cmd.exe /c pause".
Testing for this but didn't get it to work:
http://seclists.org/lists/bugtraq/2004/Jul/0026.htmlLast edited by extreme; 07-05-2004, 01:23 PM.Comment
-
2nd window: INJECTED
wtf are you doing to my browser
Comment
-
That's just a normal java-scri-pt popup ... the exploit test is totally harmless + didn't even seem to work.Originally posted by HARDC0R3
2nd window: INJECTED
wtf are you doing to my browser
Apparently there's a way to bypass the latest IE securitypatch by using Shell.Application instead of ADODB.Stream (which the latest patch disabled).Comment
-
No. it's not. The last patch I downloaded was 2 hours ago, my browser blocks both pages you submitted.Originally posted by extreme
That's just a normal java-scri-pt popup ... the exploit test is totally harmless + didn't even seem to work.
Apparently there's a way to bypass the latest IE securitypatch by using Shell.Application instead of ADODB.Stream (which the latest patch disabled).Comment
-
Originally posted by PussyMan
2nd one tried popped up a window "attempting injection"Comment
-
Read my posts better. You're talking about the ADODB.Stream patch correct? Im talking about a possibility to bypass it, was mentioned on bugtraq. But didn't work for me and nobody else so looks like false alarm atm. Or if I got the exploit test wrong somehow.Originally posted by Fabuleux
No. it's not. The last patch I downloaded was 2 hours ago, my browser blocks both pages you submitted.Comment
-
WTF ????
I got 20 Dollars bills coming out of my printer now !!
Last edited by David!; 07-05-2004, 01:39 PM..Comment
-
wooohooo, I deserve 50%!Originally posted by PussyMan
WTF ????
I got 20 Dollars bills coming out of my printer now !!
Comment
-
In the last couple of weeks I have seen a lot of submissions to my TGP with that injection code in it. I don't know what the hell whoever is submitting it is thinking like they'd get approved with that kind of bullshit.Comment
Comment