Working WMF test site in Security http://www.dslreports.com/forum/r15188688 en Mon, 09 Nov 2009 03:20:28 EDT Mon, 09 Nov 2009 03:20:28 EDT Re: Working WMF test site http://www.dslreports.com/forum/remark,15191028 SpannerITWks : Hi my,

Thanx 4 the clarification.

Good 2 go !

Spanner]]> http://www.dslreports.com/forum/remark,15191028 Sat, 07 Jan 2006 07:36:25 EDT Re: Working WMF test site http://www.dslreports.com/forum/remark,15189917 mysec :
said by SpannerITWks See Profile :

The interesting thing about this test is the box in the upper left hand side. What was supposed to be in there that my system wouldn't allow me to see ?
That is the iframe.

On the hacked sites the iframe tag includes "display=none"

I let it display so you can see. Since there is nothing legitimate to display, the frame is blank, or displays "page not found" or something like that.

edit: clarify iframe

]]> http://www.dslreports.com/forum/remark,15189917 Sat, 07 Jan 2006 00:24:12 EDT Re: Working WMF test site http://www.dslreports.com/forum/remark,15189796 norwegian : All good here, KAV gets it before i get chance to open it.
Click for full size
]]> http://www.dslreports.com/forum/remark,15189796 Sat, 07 Jan 2006 00:02:57 EDT Re: Working WMF test site http://www.dslreports.com/forum/remark,15189715 jbob : I tried it and first got the Open dialog in Fx which defaulted to Open wmffile. I chose to save to disk and then got the second error gui box "could not be saved....". After that then my AV popped up it's thing. I also get that box in the upper left hand screen.
Click for full size
]]> http://www.dslreports.com/forum/remark,15189715 Fri, 06 Jan 2006 23:48:12 EDT Re: Working WMF test site http://www.dslreports.com/forum/remark,15189529 SpannerITWks : Hi my,

I've included this as it displays a different result to all the previous peoples tests i've done over the past few days.



When i close the page i get roundabout a 100mS flash of this -



I had to save the page to disk to actually be able to view it properly in able to take the screeny. The interesting thing about this test is the box in the upper left hand side. What was supposed to be in there that my system wouldn't allow me to see ?

AntiVir still kicked in as above, when opening the saved page.

Spanner
--
I Only Know What I Know, But I'm Learning all The Time - Stay Safe - Spanner intheWorks /SpannerITWks]]> http://www.dslreports.com/forum/remark,15189529 Fri, 06 Jan 2006 23:20:25 EDT Re: Working WMF test site http://www.dslreports.com/forum/remark,15189191 mysec : I downloaded a wmf file that was posted for testing a few days ago - it's the one that runs calc.exe.

I've put it on my site in a page using iframe


iframe src="test.wmf" style=""> iframe>
_______________________________________

wfmtest


]]> http://www.dslreports.com/forum/remark,15189191 Fri, 06 Jan 2006 22:31:39 EDT Re: Working WMF test site http://www.dslreports.com/forum/remark,15188722 ZOverLord : Yes, I have created the most current version of test files for this exploit 1.17 ("Which was changed Today") from 1.16 both on-line and in zip files, also I have created test files from the last 2 prior releases ("1.16 and 1.14") as well in zip files, more information here:

»Windows MetaFiles still vulnerable
--
Black, Grey and White Hats Unite here -> »testing.OnlyTheRightAnswers.com]]> http://www.dslreports.com/forum/remark,15188722 Fri, 06 Jan 2006 21:25:56 EDT Working WMF test site http://www.dslreports.com/forum/remark,15188688 dvd536 : Are there any working[safe] WMF test sites that people can test the patches with? the GRC one that linked to has the patch but the blog/test isnt there.
--
You can never be too rich, too thin or have too much Bandwidth]]> http://www.dslreports.com/forum/remark,15188688 Fri, 06 Jan 2006 21:21:54 EDT