full-disclosure - dcom exploit code observations

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <1059403374.21290.42.camel@moneyshot.nationstitle.com>
From: seclist at wiresec.net (john)
Subject: dcom exploit code observations

Downloaded the revised exploit code by HD moore and got it compiled on a
linux box.

There seems to either be some flaws in the exploit code or just a
general instability of the rpc service.

If the code is run against a vulnerable box and the right SP level
setting is not correct it crashes the rpc service and shuts down the
port. Restarting the service will bring it back online. If the attack is
successful you get a nice pretty windows shell. If you exit the shell
the rpc service again crashes.

I am sure the code will be revised to eliminate these problems.

John