full-disclosure - Re: DCOM exploit Italian offset

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <BAY7-DAV13luLCTaogx000144ab@hotmail.com>
From: rlanguy at hotmail.com (Lan Guy)
Subject: Re: DCOM exploit Italian offset

Hi,

 I have been trying to get the offsets for Windows Server 2003 (english at
first), i believe it is vulnerable, but I cannot seem to locate it.

TIA

Lan Guy

----- Original Message ----- 
From: Zorrito
To: full-disclosure@...ts.netsys.com
Sent: Sunday, August 03, 2003 10:02 AM
Subject: [Full-Disclosure] Re: DCOM exploit Italian offset

Hi, I am interested in finding the offsets for Win2k latinamerican-spanish
version, the english version offsets works in spanish with win2k SP0 only, I
have not tested with xp yet.
Does anybody knows a practical method to find the offsets? I dont want to
reboot after each failed test.

Thanks

M.R.

From: Davide Venturelli <ventu@...tellonet.com>
To: full-disclosure@...ts.netsys.com
Organization:
Date: 31 Jul 2003 18:21:54 +0200
Subject: [Full-Disclosure] DCOM exploit Italian offset

I found the offset for Windows XP SP0 (italian) and it works with dcom.c:

----->        0x77e41cd3

I also checked for the offset of Windows XP SP2 (italian) but I was not able
to test it.
I will test it ASAP but if it works, or if you know the right one, pls
contact me.

----->        0x77e426ba

bye,

D.V.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html