Help - Search - Members - Calendar
Full Version: Retrieving Information About Programs That Can Be Invoked Via Url Protocols
Forums > General GSO > GSO Tutorials
Eduardo
Retrieving Information about programs that can be invoked via URL Protocols
%By Edu%

-Introduction-


"It is possible to retrieve information about local programs via URL protocols by simply accessing a webpage with Internet Explorer.
This may be abused by some sites to retrieve sensitive information such as a program name/type/version/language installed in your computer.
In this article I will show you how to retrieve information about 2 Media Players: Windows Media Player and Real Player.
This information retrieving may be accomplished by using Activex Controls installed by these softwares, if they give this functionality or if the file
itself (usually an exe, dll or ocx file) provide this information. But in this particular article I will show a method that does not
require Activex instantiation or active scripting, we will just use URL protocols
Some Media Players such as Real Player and Windows Media Player registers URL protocols such as the MMS (Windows Media Player) and RTSP (Real Player).
Other Media Player softwares may also register custom protocols, or use the RTSP protocol and register it for themselves, so when this protocol is invoked, the URL will be processed by it..."

Read the full article in the attached file.
Dutch Nameless One
Sounds cool!
tnx! biggrin.gif

[EDIT]
I can't download it :S
When I try it I get an erro message:
Sorry, but you do not have permission to use this feature. If you are not logged in, you may do so using the form below if available.

When can I get permission?
Thanks anyway! cool.gif
Aku
Just a note

If you use autoruns from www.sysinternals.com (now owned by microsoft), it will list all the protocols that a browser understands.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.