Comments on: Proof of Concept for Internet Explorer Modal Dialog Exploit http://www.darknet.org.uk/2006/05/proof-of-concept-for-internet-explorer-modal-dialog-exploit/ Ethical Hacking, Penetration Testing & Computer Security Sat, 21 Nov 2009 06:04:59 +0000 http://wordpress.org/?v=2.8.6 hourly 1 By: mozzy http://www.darknet.org.uk/2006/05/proof-of-concept-for-internet-explorer-modal-dialog-exploit/#comment-1004 mozzy Wed, 03 May 2006 06:33:50 +0000 http://www.darknet.org.uk/2006/05/proof-of-concept-for-internet-explorer-modal-dialog-exploit/#comment-1004 Maybe this one helps for those who would like to run XP on a "weak" machine :) http://www.winhistory.de/more/386/xpmini_eng.htm Maybe this one helps for those who would like to run XP on a “weak” machine :)

http://www.winhistory.de/more/386/xpmini_eng.htm

]]> By: Darknet http://www.darknet.org.uk/2006/05/proof-of-concept-for-internet-explorer-modal-dialog-exploit/#comment-1001 Darknet Wed, 03 May 2006 06:24:04 +0000 http://www.darknet.org.uk/2006/05/proof-of-concept-for-internet-explorer-modal-dialog-exploit/#comment-1001 Well my Win2k is fully up to date..as up to date as it can be anyway. A Celeron 2.4 is a very powerful machine relatively...I'm talking about those computers like Pentium II 333mhz. How can those run Windows XP? And yes people are still using such machines. Yah I'm pretty sure the XP SP2 has all updates, as it even has the stupid Genuine Advantage thing installed, which was only last week. Try not to quote GRC.com if you can, most people in the security industry think Steve Gibson is a raving lunatic ;) He does have some good coverage on the raw sockets issue though. But why hack the OS to give back some functionality you shouldn't have lost in the first place? Luckily the new nmap compensates the problem with the ability to send Ethernet frames. Well my Win2k is fully up to date..as up to date as it can be anyway.

A Celeron 2.4 is a very powerful machine relatively…I’m talking about those computers like Pentium II 333mhz. How can those run Windows XP?

And yes people are still using such machines.

Yah I’m pretty sure the XP SP2 has all updates, as it even has the stupid Genuine Advantage thing installed, which was only last week.

Try not to quote GRC.com if you can, most people in the security industry think Steve Gibson is a raving lunatic ;)

He does have some good coverage on the raw sockets issue though. But why hack the OS to give back some functionality you shouldn’t have lost in the first place?

Luckily the new nmap compensates the problem with the ability to send Ethernet frames.

]]> By: mozzy http://www.darknet.org.uk/2006/05/proof-of-concept-for-internet-explorer-modal-dialog-exploit/#comment-996 mozzy Wed, 03 May 2006 06:03:24 +0000 http://www.darknet.org.uk/2006/05/proof-of-concept-for-internet-explorer-modal-dialog-exploit/#comment-996 he he well... don't know what to say... would you run a red hat version without neccessary security updates? i wouldn't thought so... but you're right. It bothers me too that XP requires quiet some hardware (though i was running XP SP 2 on a Celeron 2.4 with 128 RAM without severe problem thanks to the ability to disable all styles and animations) but what is really interesting is that it crashed IE with you on XP SP2 though the article says that it is not affected...are you maybe missing updates? anyway... I am going to make my own system...with black jack and hookers :P however about the Raw sockets issue i found you two very interesting articles :) http://grcsucks.com/mirror/SocketToMe.htm Talks about how to fix this issue in XP AND 200 ;) http://grc.com/dos/xpconference.htm Talks about how microsoft does not really care about these issues xD The later article is interesting butnot really useful whereas the first one helps you to secure your system (if don't know already ;) ) sorry for double posting… but i just found this one regarding raw sockets http://grc.com/dos/ The article wit the title “Microsoft Removes Raw Sockets from XP” Updates, updates, updates… ;) he he
well… don’t know what to say…
would you run a red hat version without neccessary security updates?

i wouldn’t thought so…

but you’re right. It bothers me too that XP requires quiet some hardware (though i was running XP SP 2 on a Celeron 2.4 with 128 RAM without severe problem thanks to the ability to disable all styles and animations)

but what is really interesting is that it crashed IE with you on XP SP2 though the article says that it is not affected…are you maybe missing updates?

anyway…
I am going to make my own system…with black jack and hookers :P

however about the Raw sockets issue i found you two very interesting articles :)

http://grcsucks.com/mirror/SocketToMe.htm
Talks about how to fix this issue in XP AND 200 ;)

http://grc.com/dos/xpconference.htm
Talks about how microsoft does not really care about these issues xD

The later article is interesting butnot really useful whereas the first one helps you to secure your system (if don’t know already ;) )

sorry for double posting…
but i just found this one regarding raw sockets

http://grc.com/dos/
The article wit the title “Microsoft Removes Raw Sockets from XP”

Updates, updates, updates…

;)

]]> By: Darknet http://www.darknet.org.uk/2006/05/proof-of-concept-for-internet-explorer-modal-dialog-exploit/#comment-983 Darknet Tue, 02 May 2006 17:05:32 +0000 http://www.darknet.org.uk/2006/05/proof-of-concept-for-internet-explorer-modal-dialog-exploit/#comment-983 <strong>mozzy:</strong> Well I'm still still using Windows 2000 as are a lot of people I know as we MUCH prefer it to Windows XP (raw sockets pls?) And I know quite a lot of people with older computers running Windows98, not everyone can afford the latest hardware. So I'm pretty sure it still effects a significantly large demographic, and it crashed my IE on XP SP2 anyway.. Sorry to be outdated ;) mozzy: Well I’m still still using Windows 2000 as are a lot of people I know as we MUCH prefer it to Windows XP (raw sockets pls?)

And I know quite a lot of people with older computers running Windows98, not everyone can afford the latest hardware.

So I’m pretty sure it still effects a significantly large demographic, and it crashed my IE on XP SP2 anyway..

Sorry to be outdated ;)

]]> By: mozzy http://www.darknet.org.uk/2006/05/proof-of-concept-for-internet-explorer-modal-dialog-exploit/#comment-981 mozzy Tue, 02 May 2006 12:20:24 +0000 http://www.darknet.org.uk/2006/05/proof-of-concept-for-internet-explorer-modal-dialog-exploit/#comment-981 Hey there, Well I am not a fan of IE either but dude....c'mon "This works as advertised against all systems EXCEPT Windows XP SP2 and Windows Server 2003 SP1." Don't you think that all earlier versions of browsers (systems) have flaws that you could test around with if not the needed updates are installed? Which user in the right mind does not have XP SP2 on the machine (if he installed windows at all). However, I enjoy reading your blog...lots of interesting and funny stuff here. This was the only post that kept me thinking that it is kinda wrong ;) It is like stabbing in open wounds xD Hey there,
Well I am not a fan of IE either but dude….c’mon “This works as advertised against all systems EXCEPT Windows XP SP2 and Windows Server 2003 SP1.”

Don’t you think that all earlier versions of browsers (systems) have flaws that you could test around with if not the needed updates are installed? Which user in the right mind does not have XP SP2 on the machine (if he installed windows at all).

However, I enjoy reading your blog…lots of interesting and funny stuff here. This was the only post that kept me thinking that it is kinda wrong ;)

It is like stabbing in open wounds xD

]]>