Lucene search

K
packetstormSachin WaghPACKETSTORM:137742
HistoryJul 01, 2016 - 12:00 a.m.

Putty Beta 0.67 DLL Hijacking

2016-07-0100:00:00
Sachin Wagh
packetstormsecurity.com
39

0.001 Low

EPSS

Percentile

43.4%

`/*  
Exploit Title: Putty DLL Hijacking Exploit ( UxTheme.dll or ntmarta.dll )  
Vendor Homepage:https://the.earth.li/~sgtatham/putty/latest/x86/putty.exe  
Author: Sachin Wagh (@tiger_tigerboy)  
Linkedin: https://in.linkedin.com/in/sachin-wagh-95b17555  
Affected Version: beta 0.67  
Tested on: Windows 7 Ultimate  
*/  
  
Proof-Of-Concept :  
  
1. Create malicious dll file and save it as UxTheme.dll or ntmarta.dll in  
your "Downloads" directory.  
  
2. Download https://the.earth.li/~sgtatham/putty/latest/x86/putty.exe and  
save it in your "Downloads"  
directory.  
  
3. Execute putty.exe from your "Downloads" directory.  
  
4. Malicious dll file gets executed.  
  
  
Credit,  
  
*Sachin Wagh*  
`

0.001 Low

EPSS

Percentile

43.4%