Slashdot Mirror

← Back to Stories (view on slashdot.org)

Tunneling Shellcode with ActiveX

Posted by Zonk on from the who-needs-proxies? dept.

hdm writes "In the first issue of the Uninformed Journal, skape describes a method for using ActiveX as a transport mechanism for shellcode. The implementation, dubbed 'PassiveX', can be used to tunnel an interactive command shell or full VNC session over the HTTP protocol. PassiveX takes advantage of the Internet Explorer settings to pass through web proxies and escape restrictive outbound firewalls."

1 of 11 comments (clear)

  1. fp! by vettemph · · Score: -1, Offtopic

    fp!

    Damn, this 20 second wait is a bitch.

    --
    The government which is strong enough to protect you from everything is strong enough to take everything from you.