Thursday, September 11, 2008

The no-exploit exploit

Dean wrote a cool post on how to drop and run .EXE's on a client just by getting them to view a web page in Internet Explorer. Yay ActiveX!

The link: http://carnal0wnage.blogspot.com/2008/08/owning-client-without-and-exploit.html

No comments: