The compiled version of this xploit.

But its only fpr the chinese edition

i hope some1 can add other targets ?!

have luck

thanks for the copiled version dude

Well here 'ya go, loads of Gsecur's "kudos"
Na, seriously, thanks a bunch!

RPC DCOM overflow Vulnerability discoveried by NSFOCUS
Code by FlashSky,Flashsky xfocus org
Welcome to our Site: http://www.xfocus.org
Welcome to our Site: http://www.venustech.com.cn
rpc2 targetIP
for cn w2k server sp3/sp4+ms03-26


sp3/sp4+ms03-26 <--- 26 ??


Thanks

D:\tools\RPC2.1 CN>rpc2 xx.xx.xx.xx
RPC DCOM overflow Vulnerability discoveried by NSFOCUS
Code by FlashSky,Flashsky xfocus org
Welcome to our Site: http://www.xfocus.org
Welcome to our Site: http://www.venustech.com.cn

D:\tools\RPC2.1 CN>rpc2 xx.xx.xx.xx
RPC DCOM overflow Vulnerability discoveried by NSFOCUS
Code by FlashSky,Flashsky xfocus org
Welcome to our Site: http://www.xfocus.org
Welcome to our Site: http://www.venustech.com.cn

D:\tools\RPC2.1 CN>rpc2 xx.xx.xx.xx
RPC DCOM overflow Vulnerability discoveried by NSFOCUS
Code by FlashSky,Flashsky xfocus org
Welcome to our Site: http://www.xfocus.org
Welcome to our Site: http://www.venustech.com.cn

D:\tools\RPC2.1 CN>


Does nothing at all...

of course this happens when I find a mess of VULN Chi windows

*runs virus scan*

Just tried this on my friends XP just for the hell of it.

It crashed the rpc and shutdown his system , so this seems to do something

Plat..thanks for compiling this but can u tell me how u managed to get around that undefined reference compilation error when compiling?

it`s only for cn win2k sp3/sp4+ms-03-026(patched)
add user SST of administrators pass:557

why they dont do with Eng ret?

because xfocus is a chinese group?

http://www.k-otik.com/exploits/09.16.MS03-...3-039-exp.c.php eng

@Zenuka: this is the old one and its not really workin well

i think i have the solution to the problem, the Chinese OS RET must be changed to the universal win2k ret which is 0x0018759F but the thing is i don't have visual c so i can't do this

sure the universal win2k ret address for rpcss is 0x0018759F ?

yeep

nice, was waiting on this mofo

does anyone have a new Compiled Windows Rpc Dcom2 Remote Exploit version with the right ret adress for (engl.) german win ? :-)