Follow us on Twitter!
Things are more like they are now than they have ever been before. - Dwight D. Eisenhower
Thursday, April 24, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 28
Guests Online: 23
Members Online: 5

Registered Members: 82895
Newest Member: kevy90
Latest Articles

Scrap Virus

Arrow Image Ever wanted to execute a command through a docu<i></i>ment...



Thanks to AbSoRb for doing something weird with the first article!
For help with Flash8 Animating, Encryption challenges, Tracking challenges, Realistic8, Social Engineering challenges
check out &#39;the_flash&#39; account!

&#39;Scrap Virus&#39;.

What is and how?
//Thanks to Support.Microsoft.com for this batch of information

In Microsoft Word and Microsoft Excel, you can drag and drop selected document text, drawing objects, and graphics to the Windows desktop. A desktop icon is created for the scrap file, along with a file located in the Windows&#92;Desktop subfolder with an .shs extension. This file is a native program document that contains the information that was selected and dragged onto the Windows desktop. If you select and delete the desktop icon, the corresponding .shs file is also deleted. You can select and drag a scrap file on the desktop into another document.

NOTE: The scrap file is a special OLE object and is not a readable file. You cannot open an .shs file nor can you insert it into another document (for example, you cannot insert an .shs file by using the File command on the Insert menu in Word). To place a scrap into a document or workbook, you must drag it to the document. However; you can rename the scrap object or move it from one directory to another just as you can rename or move an ordinary file.

The Word for Windows scrap file document contains margin settings of 0 (zero) inches. When you drag the scrap document into another Word document, the scrap file conforms to the page setup of the existing Word document; thus, only the contents of the scrap file are transferred into the Word document.

//Thanks to another source from the web *Information retrieved via other member*

Current versions of Windows do not show the file extension &quot;SHS&quot; by default, even if you turn off &quot;Hide known filetypes&quot; setting in Explorer.

To make SHS and some other extensions (such as LNK) visible, remove these keys from registry:

HKEY_CLASSES_ROOT&#92;shellscrap&#92;nevershowext
HKLM&#92;software&#92;classes&#92;shellscrap&#92;nevershowext

//start of tutorial

How can we make one that will execute a command line?

Fairly simple! This technique works on Microsoft XP Home and Pr0 editions. (Others I have not tested)

Open up &#39;Word Pad&#39;. ( Start &gt; All Programs &gt; Accessories &gt; Word Pad )

Now you have a blank docu&lt;i&gt;&lt;/i&gt;ment. This is where we create the &#39;object&#39;.

*Points to the toolbar at the top* Click &#39;Insert&#39; and you need to click &#39;Object&#39;

Now you should have a rectangular box appear with the options to the left as:-
&#39;Create New&#39;and &#39;Create from file&#39;.

Select create from file.

You now want to open &#39;notepad.exe&#39;. Located in folder &#39;system32&#39;. You can do this two ways...
First way:-
Pasting &#39;C:&#92;WINDOWS&#92;system32&#92;notepad.exe&#39; into the file path.

Second way:-
Browse &gt; My computer &gt; Local Disc C &gt; docu&lt;i&gt;&lt;/i&gt;ments and Settings &gt; *Click your XP User account* &gt; Start menu &gt; Accessories &gt; notepad. Now click Open and Ok.

Now in the top left of your document you should have an outlined box with some random squares. In the middle &#39;Notepad.exe&#39;. If you have Brilliant! Next step. If not... Re-do the previous step.

Now we want to add the command of our choice to the object.

Right click the object and click &#39;Package Object&#39; then &#39;Edit Package&#39;.

If you have done this correctly which I sure as hell hope you have, you should now have a rectangular box open titled &#39;Object Packager&#39;.

*points to the toolbar at the top* Click &#39;Edit&#39;. Notice the last available option ... &#39;Command line&#39;. WE WANT THAT!

Now ANOTHER rectangular box should come up with an input field. This is where we put the command. Be creative! Use www.ss64.com/nt for more commands.

eg. &#39; shutdown /c &quot;Toodle-pip&quot; -t/:300&#39;
That will shutdown the computer in 300 seconds. For that 300 it will say &quot;Toodle-pip&quot;.

Note:- System_Meltdown made a very good point that giving the shutdown be 300 seconds the user could abort shutdown. (See comments)
System corrected this with &#39;shutdown -s -c &quot;Byezybye!!&quot; -t 01&#39;
See comments for full comment. Thanks system_meltdown


Once you have your command in, close and save changes. Now copy and paste the object into My documents or any folder of your choice and it should be renamed &#39;Scrap.shs&#39;. Voila! Done!

Now when you open this file the command will execute.
Bind it, Zip it, Send it. You decide.

Note// Don&#39;t come running to me crying pointing the finger if you do anything wrong to any computer because frankly, I have no time for your stupidity.

ENJOY! xD

//NOTE:- Please leave comment or rating ^^

Comments

AbSoRbon July 15 2006 - 14:44:45
finally got this published ! Grin Well done on the article, can't wait to try it out Smile
WaTcHeRon July 15 2006 - 15:09:13
Nice Smile
sniper_kyleon July 16 2006 - 22:53:43
doesnt windows xp give some sort of warning when it attempts to open a scrap file? I thought for sure when i used xp it gave that "malicious code could execute if you continue to open this file" dialog...but i cant be sure. Im using windows 2000 right now so i cant check, but maybe someone could check for me? Wink
-The_Flash-on July 17 2006 - 16:49:10
I'm not going to check for you because there is no scrap file I would ideally like to execute on my computer. *Points to article* I said 'Bind' the scrap so it's hidden from the computer.
system_meltdownon July 17 2006 - 19:57:01
Nice article man, one thing, for your shutdown thing, that can be aborted using 'shutdown -a' if it's set for 300 secs, you should do this: 'shutdown -s -c "Byezybye!!" -t 01', that'll shut down in one second, giving the user time to read the message Smile
-The_Flash-on July 17 2006 - 21:23:41
Hah that's a very good point! //edits article with credit
tancurromon July 17 2006 - 21:53:02
im not sure if my syntax is completely correct, but is there not a way oh doing zero time the -y or something so it shuts down straight away, may be completely stupid here.
-The_Flash-on July 17 2006 - 22:21:38
' -f ' is the command for shutdown without warning. this stops any option to save current data or close apps. Wink
mrdj204on July 17 2006 - 22:52:46
how would i bind it?
-The_Flash-on July 17 2006 - 23:28:10
Using Google to look up binding files Smile
doowabon July 25 2006 - 00:00:23
Very nice article! Helped me out so much
hacker_jacobon November 24 2006 - 18:56:15
easier thing to do when locating notepad is to just drag and drop the notepad from your start menu to my documents.. also.... V nice article! im defo using it at school! Rating : awsome
kadenon December 18 2006 - 12:53:08
cool... *thinks about school to* hmm... can do some damage :evil: great article rating=awsome
Post Comment

Sorry.

You must have completed the challenge Basic 1 and have 100 points or more, to be able to post.