HFX Forum

General Discussion => General Discussion => Topic started by: Maxload on November 01, 2004, 08:22:35 PM

Title: New Remote Windows Exploit (MS04-029)
Post by: Maxload on November 01, 2004, 08:22:35 PM

/*
*  Date: 2004/10/30
*  Maxload maxload@yahoo.com
*
*  Exploit for "Vulnerability in RPC Runtime Library"
*  http://www.microsoft.com/technet/security/bulletin/MS04-029.mspx
*
*  Tested Against:
*  Windows 2000 (SP3 SP4)
*  Windows XP (SP1 SP2)
*  Windows NT4 (SP6a)
*
*  EXPLOIT IS PROVIDED FOR EDUCATIONAL PURPOSES ONLY AS A PROOF OF CONCEPT
*  I TAKE NO RESPONSIBILITY FOR ANY USE OF THIS CODE.
*
*
*  Instructions:
*
*  [user@localhost] $ gcc -o maxload maxload.c
*  [user@localhost] $ ./maxload
*  *** MaxLoad (windows rpc exploit) v.1 ***
*
*  For educational propose only!
*  error: you must enter a valid ip
*  usage:./maxload [IP-ADDRESS]
*  e.g: ./maxload 192.168.1.23
*
*
*  [user@localhost] $ ./maxload 192.168.1.2
*  *** MaxLoad (windows rpc exploit) v.1 ***
*  For educational propose only!
*  Succes! Try connect to 192.168.1.2 port 31337
*
*
*  [user@localhost] $ telnet 192.168.1.2 31337
*  Connected to 192.168.1.2.
*  Escape character is '^]'.
*
*  Microsoft Windows XP [Version 5.1.2600]
*  © Copyright 1985-2001 Microsoft Corp.
*
*  C:\>
*
* Bang, here you go, administrative access..
*
*/


Do i need too say more :D

maxload.c (source code) (https://fri-adgang.dk/?get=1056)
maxload (linux binary) (https://fri-adgang.dk/?get=1055)

-MaxLoad
Title: Re:New Remote Windows Exploit (MS04-029)
Post by: Tazinator on November 04, 2004, 02:49:59 PM
Sweet  ;D
Title: Re:New Remote Windows Exploit (MS04-029)
Post by: Uneek on November 08, 2004, 05:45:23 PM
segfaults on execution...   ???