Information should be set free. In a recent 2600 meeting, some of the code contained herein was discussed from an "academic point-of -view". The author of the code did not want to publish the code but did solicit comment. I say bullshit. If there's a problem with ActiveX and NT, then let the world know.

This page is in open defiance of censorship and hiding important information hence I am presenting two serious holes in ActiveX and Windoze NT. In the future, I will post more stolen or public code for your enjoyment.

The first piece of code getadmin was done by some Russian dude. It allows you turn an ordinary user in a Windoze NT network into an administrator. M$ tried to fix it but could not. The source code is included as well as the executable. Nachos will soon release the ActiveX control version that will allow you to launch an attack through the net.

The second piece of code DLLMainAttack was written by some guy named Jobi. The code allows you to change the security settings in M$ Internet Exploder from HIGH to None. Note that the code has to be signed with some kinda ActiveX signature maker or something. You can get it from IRC #hack and some of the kewler hacker mailing lists like DefCon, CDC, etc. Or you can social engineer one from M$. Start a new software company like the Christian Coalition Software Corporation and get as many sig authorities as you want.

GetAdmin executable	GetAdmin Source
DLLMainAttack executable	DLLMainSource