Vulnerability Development: Re: .com

["Enrique A. Sanchez Montellano" <enrique.sanchez () defcom com>]

you can rename a .exe to anything catch is ... it has to be piped 
trought cmd.exe, but then ... forcedos is present aint it fun?
and yes in the paranoic mode of putting IIS guess what .. they always 
forget to take out that one, so forcedos is there and you can just pipe 
stuff in there =)
Enrique

dullien () gmx de wrote:

> Hey Pauli,
>
> somehow we're replicating our work ;)
>
> PO> dunno if this has already occurred in people's mind but
> PO> as there is the nice similarity between the ancient .com
> PO> executable file extension and the tld .com ignorant
> PO> clients could be fooled by sending executables that
> PO> are named after popular .com www-sites. clear enough?-)
>
> Yes, and most funnily: You don't need to actually have a .com file
> in there - The operating system checks for the MZ/ZM signature,
> and then hands the file over to the .EXE handler if present. Therefore
> you can just rename any .EXE file .com and it will properly execute.
>
> Cheers,
> Thomas