SRL Archive - Research & Development Lounge

OpenFastPage


Iroki

2008-09-25 13:39:04

Important!! You need to know how you can be hacked if you use Get/PostHTTPPage/Ex procedure. If you don't know how read this:
read this!!!


Ok, now, what is OpenFastPage is something like Get/PostHTTPPage/Ex procedure but in .dll plugin.

If you want give it a try downoad this plugin and place in: SCAR 3.15\Plugins\ folder.

And here some scar code:
program OpenFastPage;

begin
WriteLn('Scar version: ' + OpenFastPage('freddy1990.com/getversion.php?name=SCAR'));
end.


Give it a try :)

plugin code:

library OpenFastPagePlugin;
//,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"'
// ,.;'"ManFromCzech Plugin"';.
//"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.
uses
FastShareMem,
SysUtils,
Classes,
Windows,
IdHttp,
Graphics;
//,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"'
// ,.;'"ManFromCzech Plugin"';.
//"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.
{$R *.res}
//,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"'
// ,.;'"ManFromCzech Plugin"';.
//"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.
function OpenFastPage(URL: string): string; stdcall;
var
s, mystring: string;
begin
mystring := URL;
with TIdHttp.Create(nil) do
try
s := Get('http://' + mystring);
finally
result := s;
Free;
end;
end;
//,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"'
// ,.;'"ManFromCzech Plugin"';.
//"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.
function GetFunctionCount(): Integer; stdcall; export;
begin
Result := 1;
end;
//,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"'
// ,.;'"ManFromCzech Plugin"';.
//"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.
function GetFunctionInfo(x: Integer; var ProcAddr: Pointer; var ProcDef: PChar): Integer; stdcall;
begin
case x of
0:
begin
ProcAddr := @OpenFastPage;
StrPCopy(ProcDef, 'function OpenFastPage(URL: string): string;');
end;
else
x := -1;
end;
Result := x;
end;
//,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"'
// ,.;'"ManFromCzech Plugin"';.
//"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.
exports GetFunctionCount;
exports GetFunctionInfo;
//,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"'
// ,.;'"ManFromCzech Plugin"';.
//"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.;'"';.,.
end.

Wizzup?

2008-09-25 13:44:07

Post the source of the plugin, will you?
For all I know, this file will actually steal the users details instead. :)
Also, I don't see the use of this, except for the fact that you will avoid SCAR's Security system.

n3ss3s

2008-09-25 13:53:27


program OpenFastPage;

begin
WriteLn('Scar version: ' + OpenFastPage('freddy1990.com/getversion.php?name=SCAR'));
end.


It's epic that nobody will get hacked if you use it like this, that, my friend, is an infinite loop ;)

Bobarkinator

2008-09-25 20:04:46

From: n3ss3s

program OpenFastPage;

begin
WriteLn('Scar version: ' + OpenFastPage('freddy1990.com/getversion.php?name=SCAR'));
end.


It's epic that nobody will get hacked if you use it like this, that, my friend, is an infinite loop ;)


program OpenFastPage, not Procedure

Iroki

2008-09-26 11:47:58

From: Wizzup?
Post the source of the plugin, will you?
For all I know, this file will actually steal the users details instead. :)
Also, I don't see the use of this, except for the fact that you will avoid SCAR's Security system.


I aggre with you, but it shows possibilities of SCAR and dll plugins :)

mastaraymond

2008-09-26 14:09:08

From: manfromczech
I aggre with you, but it shows possibilities of SCAR and dll plugins :)

Everyone should be aware of that, it's a quite know fact around here :). Scar could make like a safe list of dll's, but not quite sure if that would help so much either :).