Am Montag, den 25.10.2010, 22:56 +0000 schrieb Thor (Hammer of God):
> The main point is that you've got to get people to not only connect up
> to your remote share, but you've got to get them to execute the file,
> etc. So I'm just wondering what makes this anything more than any
> other "put a malicious link here to make the user execute it" or email
> attachment business, particularly when you say "Remote Code
> Execution."
Err... as far as I know, the interesting part is having the current path
be set to something you can control (to make windows load evil dlls),
and if you just link to the file, that's not the case.
> The main point is that you've got to get people to not only connect up
> to your remote share, but you've got to get them to execute the file,
> etc. So I'm just wondering what makes this anything more than any
> other "put a malicious link here to make the user execute it" or email
> attachment business, particularly when you say "Remote Code
> Execution."
Err... as far as I know, the interesting part is having the current path
be set to something you can control (to make windows load evil dlls),
and if you just link to the file, that's not the case.
Jann
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEABECAAYFAkzHChcACgkQzjXtStZOSRdx2ACfdRYFv8PpZJ0bPVfGWbn9FWEZ
VOYAnjKY13U+8cGJwxTcklnHo+q4gPCs
=/WRS
-----END PGP SIGNATURE-----
[ reply ]