Vulnerability Development mailing list archives

Re: Shell:


From: mike () genxweb net
Date: Thu, 8 Jul 2004 15:04:19 -0400

If you want to pass the cmd a flag try this after /c command I use the cmd.exe
/c alot in calling apps from other apps.

Quoting steve johnson <sjohns11 () gl umbc edu>:

On a Windows 2000 box, IE version 6, the command does nothing ("page
cannot be displayed"). In addition, shell:\\windows\system32\cmd.exe
doesn't do anything either. Run C:\windows\system32\cmd.exe and a shell
pops up right away.


...steve

On Thu, 8 Jul 2004, Perrymon, Josh L. wrote:

What do you think about this in Mozilla OR IE?

shell:windows\system32\cmd.exe

I can't seem to pass any variables to it though because it bombs but my
syntax may be incorrect.



Joshua Perrymon
Sr. Network Security Consultant
PGP Fingerprint
51B8 01AC E58B 9BFE D57D  8EF6 C0B2 DECF EC20 6021





Current thread: