How do hackers exploit ActiveX? (For educational purposes ONLY!)

How do hackers execute code on your computer simply by getting you to click on a link?
This video gives a very detailed explanation of one example of how hackers can exploit activeX to execute code on your computer, simply by getting you to click on a link.

IF YOU CANNOT HANDLE INFORMATION RESPONSIBLY, OR REFRAIN YOURSELF FROM DOING STUPID STUFF, PLEASE DO NOT WATCH THIS VIDEO.

Information is free, and there is NOTHING illegal about KNOWING. It is only by understanding how these attacks work, that we can learn to avoid them. This video is for INFORMATIONAL PURPOSES ONLY and should not be used to formulate any attack, EVER!

Category:

Education

Tags:

• hack
• hacker
• hacking
• how
• to
• execute
• remote
• code
• vulnerability
• activex
• javascript
• java
• html
• script
• scripting
• cyber
• obfuscate
• demonstration
• thinkgeek
• instructions
• tutorial
• tips & tricks

[TheRhodan]

ActiveX Backdoor :D

Nice. Is it patched or does this still work?

[wtfnord]

@TheRhodan still works. :P

[MasterOfgms]

tim is gay name. u r gay. sir, please an hero and stop fagging.

[wtfnord]

@MasterOfgms good sir, I challenge you to a duel of honor.

[Mudd0000]

christ, What's the worst thing a hacker can do with command prompt. (yes I am completely oblivious when it comes to technology)

[wtfnord]

@Mudd0000 literally anything that you can do on a computer can be done from command prompt.

protip: If you can't do something from command prompt, use "echo [line of code]>[script filename]" and it will create a new script file with the contents of what you echoed (you can do multiple lines with the "&" operator). - then simply use cscript /nologo ot execute the script.

[masticina]

ActiveX is one big security failure that goes so deep .. that Microsoft CANT fix it. Their solution "Well don't use it"

... eeeh!

[toy741life]

I'm currently larning java in hihgschool. I think I am probabm;y the best in the class lol. Anyways, my goal is to custom firmware my PS3. I'll custom firmware anyone elses PS3 for $50 :)

[YanisDeLEshi]

How can you make the script to get executed without having the user to press anything in the website?

[DREWizC00L]

Nice.

[MasterOfgms]

@wtfnord i fucking accept with HASTE like a MOTHER FUCKING G BITCH

ill rape you with my front rim nigga. talkin bout my bike nigga