Re: New Remote Windows Exploit (MS04-029)

The moderator/admin messed things up - I did not send this!

Heikki Toivonen wrote:
> /*
> * Date: 2004/10/30
> * Maxload load_max_at_yahoo.com
> *
> * Exploit for \"Vulnerability in RPC Runtime Library\"
> * http://www.microsoft.com/technet/security/bulletin/MS04-029.mspx
> *
> * Tested Against:
> * Windows 2000 (SP3 SP4)
> * Windows XP (SP1 SP2)
> * Windows NT4 (SP6a)
> *
> * EXPLOIT IS PROVIDED FOR EDUCATIONAL PURPOSES ONLY AS A PROOF OF CONCEPT
> * I TAKE NO RESPONSIBILITY FOR ANY USE OF THIS CODE.
> *
> *
> * Instructions:
> *
> * [user_at_localhost] $ gcc -o maxload maxload.c
> * [user_at_localhost] $ ./maxload
> * *** MaxLoad (windows rpc exploit) v.1 ***
> *
> * For educational propose only!
> * error: you must enter a valid ip
> * usage:./maxload [IP-ADDRESS]
> * e.g: ./maxload 192.168.1.23
> *
> *
> * [user_at_localhost] $ ./maxload 192.168.1.2
> * *** MaxLoad (windows rpc exploit) v.1 ***
> * For educational propose only!
> * Succes! Try connect to 192.168.1.2 port 31337
> *
> *
> * [user_at_localhost] $ telnet 192.168.1.2 31337
> * Connected to 192.168.1.2.
> * Escape character is \'^]\'.
> *
> * Microsoft Windows XP [Version 5.1.2600]
> * © Copyright 1985-2001 Microsoft Corp.
> *
> * C:\\>
> *
> * Bang, here you go, administrative access..
> *
> */
>
> Do i need too say more :D
>
> https://fri-adgang.dk/?get=1056]maxload.c (source code)
> https://fri-adgang.dk/?get=1055]maxload (linux static binary)
>
> -MaxLoad
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

-- 
   Heikki Toivonen

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html