PDA

View Full Version : How to crash IE (win) in one eash step



mrjamin
Apr 23, 2004, 04:31 PM
easy,


<html>
<form>
<input type crash>
</form>
</html>


Thats right, 5 lines of HTML, 3 tags, will crash internet explorer.

THATS why i'm a mac user...


MrJ


Wes
Apr 23, 2004, 05:05 PM
Just tested in Virtual PC and it's true, but it appears that on recent service packs they have fixed the bug.
baby duck monge
Apr 23, 2004, 05:38 PM
hahahahaha!! i was expecting more than a code telling it to crash. MS never disappoints. :D
musicpyrite
Apr 23, 2004, 05:42 PM
So what do you do with this code? do you have to compile it or something?
I don't know much about programing.
Wes
Apr 23, 2004, 05:44 PM
It's just simple HTML, so you need to put it into a plain text document (Text Edit). Copy paste those 5 lines (presuming OS X here), go to format: Make Plain Text, go to save as. Call the file crash.html and click save, it will ask you if you want to append .txt as well which would make the file crash.html.txt, which we don't want, so click "Don't append". You now have your html document. :)

I might as well put one on my site to save you all the trouble: http://wesley.wsgurus.com/crash.html
musicpyrite
Apr 23, 2004, 07:40 PM
OK, Wes, I have save the html file to my desktop, and it has the extension .txt. What do I do next? Put it on some Windows computer?
Wes
Apr 23, 2004, 07:46 PM
Well hopefully by clicking don't append the .txt wouldn't have been there, but remove it and rename it, crash.html, then try to open it in Internet Explorer on an old pc, it won't work on recent XP builds.
Rower_CPU
Apr 24, 2004, 12:39 AM
Awesome...

My virus scan even catches that as a "Trojan" called Crasher. Wow.

This is blogworthy. :p
cjc343
Apr 24, 2004, 01:08 AM
That's great! now I just need to test it.....

I don't have easy access to a windoze computer right now so I will try it later, but on the mac, nothing happens, even when I use the debug menu to choose the agent as MSIE for Windows 6.0 Safari is fine....
stoid
Apr 24, 2004, 01:22 AM
Time to have a little fun with the roommate! Poor dumb bastard.
MorganX
Apr 24, 2004, 01:27 AM
easy,


<html>
<form>
<input type crash>
</form>
</html>


Thats right, 5 lines of HTML, 3 tags, will crash internet explorer.

THATS why i'm a mac user...
MrJ

When I pasted into an HTML file to test, as soon as the file was saved I got this from Trend Micro Antivirus (PC cillin 2005?). This is the beta that plugs into SP2 Security Center (see pic). I'll disable and run, then edit this post.

Edit: After disabling Trend, IE loaded the page without crashing which is in the second pic. I guess it's been patched. I believe all browsers have at some time been vulnerable to HTML bugs, parser glitches, etc. What matters is that they get fixed.

Security Center is pretty nice BTW. Disabling Trend put a red warning shield in the status tray notifying me that it was disabled ad to click on it to turn it back on. Security, and hackers are here to stay, if the Mac platform continues to grow, and even if it does not and keeps boasting, it will see more and more deleterious attention. TCP/IP is vulnerable, Cisco is vulnerable, now that's scary.
stoid
Apr 24, 2004, 01:28 AM
For those of you that want to try out the code, click here to load a website with the above mentioned code. (http://info.nwmissouri.edu/~S246534/crashIE.html)
cjc343
Apr 24, 2004, 02:23 AM
Ok, I still haven't tested it, but certain comments gave me an idea..

I believe that you can set a file on your hard drive to be your homepage, so, first make it a hidden file on an unwitting PC user's machine which you have access to, then, go into IE and set that file to load as the homepage.... for removal, just delete the file, but it could give someone more reasons to switch if played out correctly....
stoid
Apr 24, 2004, 02:32 AM
Ok, I still haven't tested it, but certain comments gave me an idea..

I believe that you can set a file on your hard drive to be your homepage, so, first make it a hidden file on an unwitting PC user's machine which you have access to, then, go into IE and set that file to load as the homepage.... for removal, just delete the file, but it could give someone more reasons to switch if played out correctly....

Much better to change the default homepage in IE to the link I posted, then IE will crash on start-up! Just play dumb ;) ;) "Sorry man, I don't know what to tell you, looks like you're ****ed."

Reminds me of the nifty trick to but a Shut Down AppleScript in the Start-up items! :D
mms
Apr 28, 2004, 07:42 PM
LOL that's great. Anybody know specifically which versions of Win IE are affected?
mrjamin
Apr 28, 2004, 07:46 PM
LOL that's great. Anybody know specifically which versions of Win IE are affected?anything before IE6SP1 i believe...
Nermal
Apr 28, 2004, 08:08 PM
anything before IE6SP1 i believe...

We've got SP1 here at tech, and it still crashes :D
bennetsaysargh
Apr 28, 2004, 09:09 PM
That's great! now I just need to test it.....

I don't have easy access to a windoze computer right now so I will try it later, but on the mac, nothing happens, even when I use the debug menu to choose the agent as MSIE for Windows 6.0 Safari is fine....

that's because the user agent doesn't use that browser's engine or any of it's code, it just sends the data that that browser and os opened that page.

nice idea stoid :D
KD7IWP
Apr 28, 2004, 10:19 PM
Wow, I just made my first Trojan Horse according to Norton.
lëö
May 1, 2004, 03:38 PM
Not even close!

I've tested that with several systems and diferent antivirus and nothing happened...

Beside this, there are a hundred ways to crash any browser... :cool:
Rower_CPU
May 1, 2004, 03:44 PM
Not even close!

I've tested that with several systems and diferent antivirus and nothing happened...

Beside this, there are a hundred ways to crash any browser... :cool:

Then your systems had already been patched and your antivirus software isn't set to recognize it (DAT versions, scan settings, etc.).

You got any ways to crash other browsers that come anywhere near the simplicity of this one?
King Cobra
May 1, 2004, 05:56 PM
Crash my browser of unpredictable power, Mozilla 1.6, and I'll give you a gold star.
IrishGold
May 1, 2004, 06:00 PM
Crash my browser of unpredictable power, Mozilla 1.6, and I'll give you a gold star.

Let this one continue for a while :D

http://web.mouser.org/cgi-bin/crash.pl
Rower_CPU
May 1, 2004, 06:49 PM
Let this one continue for a while :D

http://web.mouser.org/cgi-bin/crash.pl

No problem for Safari.
Mav451
May 1, 2004, 06:52 PM
Let this one continue for a while :D

http://web.mouser.org/cgi-bin/crash.pl

It's a nice try. Firefox stalled for about 7 seconds, then I closed the Tab.

Sorry. No crash.
IrishGold
May 1, 2004, 06:54 PM
It's a nice try. Firefox stalled for about 7 seconds, then I closed the Tab.

Sorry. No crash.


Bleh, well it would after a while.

I gave it a try. I have't found anything that will crash this ver. of I.E. right away either :(
Mav451
May 1, 2004, 06:58 PM
Bleh, well it would after a while.

I gave it a try. I have't found anything that will crash this ver. of I.E. right away either :(

I meant I let it stall for 7 seconds AFTER it said "crashing has commenced" - I assume that's when the page has fully loaded and "thinks" its crashing Mozilla.

For a second, I had believe it did. But then, I realized I could still mouse over the close-tab button, which worked like it always does (it closed).
yamabushi
May 1, 2004, 06:58 PM
Opera appears to be immune to the first one but stalled with the second.
Santaduck
May 1, 2004, 07:40 PM
it didnt' crash my (fully updated) IE on my XP pro box, nor Firefox on the same machine.

HOWEVER, when I did "view source" in IE, Norton AntiVirus jumped in and denied access to the file, telling me it was a Trojan Horse, with a "High Risk!" warning. Probably this doesn't happen in firefox b/c Norton may not be protecting Firefox... I have to check about that.
King Cobra
May 1, 2004, 07:43 PM
Whoa, intense recursive algorithm there.

I loaded four layers (cause I have a slow[er] computer than most of you guys, and a slow connection), and Mozilla slowed a bit. Upon closing the window, I got about 4-5 minutes of the spectrum "waiting" bevel circle, and then that was it. Mozilla 1.6 is indestructible!!!

(You have to read that last sentence while listening to the beginning of "This Is The New S***" by M. Manson for full effect.)


BTW: Did anyone else notice that the tile of the thread is: "How to crash IE (win) in one eash step"?
Mav451
May 1, 2004, 08:29 PM
haha guess nobody did. Kinda like how we can understand words that have been scrambled (but the first/last letter remain correct). *shrug*
bennetsaysargh
May 1, 2004, 09:36 PM
Let this one continue for a while :D

http://web.mouser.org/cgi-bin/crash.pl

IE mac is holding up, safari has no ill effect, will test it out on windows later :)
dbauer
May 2, 2004, 10:47 AM
Let this one continue for a while :D

http://web.mouser.org/cgi-bin/crash.pl

Brilliant! I love it! Didn't crash Safari though (at least not in the 10 minutes that I let it run).