full-disclosure - New REmote Windows Exploit (MS04-029)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <cmdd7i$o6r$1@paprika.rp.lan>
From: peter at semantico.com (Peter Hickman)
Subject: New REmote Windows Exploit (MS04-029)

DanB UK wrote:
>>Anyone compiled and tested this yet ?
> 
> 
> Cor blimy! I really hope you are joking.
> 
> Have you ever used perl before? 
> 
> It's an interpreted language!
> 
> And this code looks like it connects to an irc server(ir3ip.net) joins
> a channel(#0x) then messages the user k.
> Might have messed that slightly only looked at it for a minute.
> 
> Cheers,
> Dan.
> 

It waits for a private message from k and then shells out and executes it and 
posts the results back as a private message.