Vulnerability Development mailing list archives

Re: Shell:


From: Seth Chromick <seth.chromick () earthlink net>
Date: Thu, 08 Jul 2004 16:12:43 -0400

steve johnson wrote:

On a Windows 2000 box, IE version 6, the command does nothing ("page
cannot be displayed"). In addition, shell:\\windows\system32\cmd.exe
doesn't do anything either. Run C:\windows\system32\cmd.exe and a shell
pops up right away.


...steve

On Thu, 8 Jul 2004, Perrymon, Josh L. wrote:


What do you think about this in Mozilla OR IE?

shell:windows\system32\cmd.exe

I can't seem to pass any variables to it though because it bombs but my
syntax may be incorrect.



Joshua Perrymon
Sr. Network Security Consultant
PGP Fingerprint
51B8 01AC E58B 9BFE D57D  8EF6 C0B2 DECF EC20 6021


In Thunderbird, nothing happens at all. You click the link and you get an hourglass for a second, but nothing actually pops up.


Current thread: