News for hackers. Stuff that matters.
Re:IoT hacking and rickrolling my high school district by mustardo on Tuesday October 12, 2021 @11:48PM (#28848032)
Curious how you escaped a (browser?) With JS to do "native" net send? Assume it was some activeX?
Re:IoT hacking and rickrolling my high school district by onionisafruit on Thursday October 14, 2021 @10:40AM (#28864910)
I don’t remember the details, but based on my skill level I know it wasn’t anything novel. At the time I was learning my first programming language, Perl. IIRC I had a Perl daemon running on my computer that accepted an http request, did a reverse dns on the origin and sent the hostname in a net send message. Some of my coworkers used Sun workstations. I could get notifications from them but obviously couldn’t send them a net send message in response.
Re:IoT hacking and rickrolling my high school district by bmicraft on Wednesday October 13, 2021 @10:37AM (#28852655)
The js probably pinged their own server with then did the 'net send'
Re:IoT hacking and rickrolling my high school district by efreak on Thursday October 14, 2021 @09:25PM (#28872772)
IE supported vbscript, though I don't know how far back that goes. You can certainly run arbitrary commands from jscript or vbscript using an hta app (or wscript)