Hacking toolkit publishes DLL hijacking exploit
The appearance Monday of exploit code for the DLL loading issue that reportedly affects hundreds of Windows applications means hackers will probably start hammering on PCs shortly, security experts argued.
“Once it makes it into Metasploit, it doesn’t take much more to execute an attack,” said Andrew Storms, director of security operations for nCircle Security. “The hard part has already been done for [hackers].”
Storms was referring to the release earlier today of exploit code by HD Moore, the creator of the Metasploit open-source hacking toolkit.
Moore also issued an auditing tool that records vulnerable applications, information which can then be used to launch the exploit code that Moore crafted and added to Metasploit.
Together, the tool and exploit create an effective “point-and-shoot” attack, said Moore.
You can read the full article here.