XP ie7 0day

this spawns a shell on port 5500 , you can change the shellcode to anything you’d like, such as a reverse shell.http://www.thepentest.com/files/ie0day_activex.py

more info here http://www.rec-sec.com/2009/07/06/ms-directshow-msvidctl-exploit/