Re: .com

From: Enrique A. Sanchez Montellano (enrique.sanchezat_private)
Date: Wed Oct 03 2001 - 04:23:54 PDT

  • Next message: Matthew Sachs: "Re: AIM versions confirmed to be vulnerable to DoS"

    you can rename a .exe to anything catch is ... it has to be piped 
    trought cmd.exe, but then ... forcedos is present aint it fun?
    
    and yes in the paranoic mode of putting IIS guess what .. they always 
    forget to take out that one, so forcedos is there and you can just pipe 
    stuff in there =)
    
    Enrique
    
    dullienat_private wrote:
    
    > Hey Pauli,
    > 
    > somehow we're replicating our work ;)
    > 
    > PO> dunno if this has already occurred in people's mind but
    > PO> as there is the nice similarity between the ancient .com
    > PO> executable file extension and the tld .com ignorant
    > PO> clients could be fooled by sending executables that
    > PO> are named after popular .com www-sites. clear enough?-)
    > 
    > Yes, and most funnily: You don't need to actually have a .com file
    > in there - The operating system checks for the MZ/ZM signature,
    > and then hands the file over to the .EXE handler if present. Therefore
    > you can just rename any .EXE file .com and it will properly execute.
    > 
    > Cheers,
    > Thomas
    > 
    > 
    



    This archive was generated by hypermail 2b30 : Wed Oct 03 2001 - 10:07:51 PDT