zlacker

[parent] [thread] 3 comments
1. mustar+(OP)[view] [source] 2021-10-13 03:48:53
Curious how you escaped a (browser?) With JS to do "native" net send? Assume it was some activeX?
replies(3): >>bmicra+zc1 >>onioni+eo4 >>efreak+2r6
2. bmicra+zc1[view] [source] 2021-10-13 14:37:08
>>mustar+(OP)
The js probably pinged their own server with then did the 'net send'
3. onioni+eo4[view] [source] 2021-10-14 14:40:45
>>mustar+(OP)
I don’t remember the details, but based on my skill level I know it wasn’t anything novel. At the time I was learning my first programming language, Perl. IIRC I had a Perl daemon running on my computer that accepted an http request, did a reverse dns on the origin and sent the hostname in a net send message. Some of my coworkers used Sun workstations. I could get notifications from them but obviously couldn’t send them a net send message in response.
4. efreak+2r6[view] [source] 2021-10-15 01:25:15
>>mustar+(OP)
IE supported vbscript, though I don't know how far back that goes. You can certainly run arbitrary commands from jscript or vbscript using an hta app (or wscript)
[go to top]