If you really want to fuck IE users...

[Refalm]

Put this code in your website:

Code: [Select]

And a user using IE and MS Agent 5 (standard on in Windows XP) gets a free cupholder  

[X123]

WOW. Someone should set up a website offering free porno and put that script in the page.

[rtgwbmsr]

That is brilliant! I think I'll put that on my 404 page...

"YOU typed in the wrong URL. So I'M going to open your CD-rom drives!"

[ April 22, 2003: Message edited by: The Muffin Man ]

[Pantso]

WOW! Great script!     Where did you get that from Refalm?

[Refalm]

quote:Panos: Where did you get that from Refalm?

A friend made it... I was stunned when I saw it work    this tells much about how "secure" Internet Explorer is  

[EDIT]I tried it at home. It opens both my CD-ROM player and burner. Too bad it doesn't work in Mosaic, Mozilla or Opera  :rolleyes: [/EDIT]

[ April 22, 2003: Message edited by: Refalm ]

[Pantso]

WOW! I tried it in Win2k and it works!     Man, this is a great script! I'll make a test page just to show people how insecure IE is.  

[ShawnD1]

i put that in my signature at numerous forums  

[X123]

quote:Originally posted by ShawnD1:
i put that in my signature at numerous forums    

I thought you could only use BB code in sigs.

[SAJChurchey]

Only w/ VBScript.  JavaScript doesn't allow u to do that.  Why?  B/c client-side scripting languages are suppose to be secure and not allow remote access to the client's system.  But VBScript is M$ technology so why am i not surprised.

[Calum]

so where's the code to get it to wipe your windows system files and shut down and so on? CDROM opening is for wusses!      
but this does show a really serious vulnerable side of internet exploder. also, if enough people get on the campaign to include this code all over the place, we might induce a mass switch to linux purely from people fed up with closing their CD drawers!

[Faust]

actually there *was* code that you could embed in a web page to delete your choice of files or folders on xp.  microsoft took two months to fix it.  the reason was "well service pack one is coming out soon. we don't want to release a patch when we can just fix it with service pack one."
i think you can read about it at grc.com but yeah any windows comouter that hasnt got service pack one or any of the hotfixes after that is vulnerable to having bits deleted.  nice script though (vb is *not* what i would call better than a scripting language... i mean perl kicks its arse.)  I must add this to my debian servers index page 8-).

[Calum]

i wouldn't mind knowing that exploit for pre-service pack one, maybe i will have to google it...

[mushrooomprince]

Ok i tried running that script in IE 5.1 for os ten how come it didn't work ?

[TheQuirk]

Feel free to send people here if you want to show it off: http://thequirk123.haxorz.org/.

I assume the URL will be perfect to lure script kiddies.  :rolleyes:  It also has the thingie that crashes win9x.

[edisav]

TheQuirk:
I tried your test on my fuckdows machine and it didn't work, unless you're setting up some sort of trap.
Doublecheck that link!