is there a method you can check if your freshly new scanned DCOM scans (with scan1000) are vulnerable

scan with scanms.exe (scanms ip-ip) posted in the file download area

Scanms is XFRPCSS.EXE

--- XFRPCSS.EXE ---
--- © 2003 Internet Security Systems ---
--- ---
--- Scans for systems vulnerable to MS03-039 vuln ---
--- ISS provides no warrantees for any purpose ---
--- Use at own risk. Runs best from WinXP ---

Address Status
Usage:
scanms <ipaddr> <ipaddr-ipaddr> ...
Specify addresses and ranges on the command line

You can also try this one. Works fine. Any unpatched systems can be targeted by r3l4x's GUI tool.


heh..guess I can't Upload the scanning tool. But BOTH are available in the Download section at GSO.

-Hardcore

try kaht2.its a portscanner and if some system is vulnerable its trying to send the exploit.unfortunately i don't have a link,but with a little search at google i hope you will find it.

dude !

dcom is dead !

find a diffrent hole the hand on to untill dicent exploits to the new holes will be published !