hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

antique
Exploit downloaded from .... http://www.k-otik.com/
Wolfman
I'v been doing some tests with this earlier but no luck yet.
anyone had any luck with this one ?
isaiah
Nope. Something Is messed up, cause that 192.168 IP is Hardcoded into it. So you cant exploit anything but that IP...

dry.gif
Wolfman
QUOTE (isaiah @ Nov 13 2003, 01:58 AM)
Nope. Something Is messed up, cause that 192.168 IP is Hardcoded into it. So you cant exploit anything but that IP...

dry.gif

Duh, off course you need to change the IP before compiling.
isaiah
Yeah, I compiled that edited version, but still no go... I think its crap smile.gif

Even edited tested on a Virgin SP4 Box with FAT32. And changed the hardcoded IP to that box. And No Go Either

sad.gif
Anarchy
add
#pragma comment( lib, "mpr.lib" )
better

but who can recompiled it by any remote ip?
n4than_69
this is the error when compiled with lcc-win32:
Wedit output window build: Thu Nov 13 12:36:42 2003
Warning lanmanwsex.c: 103 assignment of pointer to const unsigned short to pointer to char
Error lanmanwsex.c 76 undefined reference to _WNetAddConnection2A@16
Error lanmanwsex.c 105 undefined reference to _WNetCancelConnection2A@12

any clues?
Anarchy
QUOTE (n4than_69 @ Nov 13 2003, 04:41 AM)
this is the error when compiled with lcc-win32:
Wedit output window build: Thu Nov 13 12:36:42 2003
Warning c:\downloads\lanmanwsex.c: 103 assignment of pointer to const unsigned short to pointer to char
Error c:\downloads\lanmanwsex.c 76 undefined reference to _WNetAddConnection2A@16
Error c:\downloads\lanmanwsex.c 105 undefined reference to _WNetCancelConnection2A@12

any clues?

u will ask MSDN better:)
add this
#pragma comment( lib, "mpr.lib" )
in the code
n4than_69
that didnt help sad.gif
tribalgoa

it works just fine, it's great code to make a really good exploit from, someone just needs to add the other OS levels .. (xp sp1 would be nice, but w2k sp4 even better)
Toilal
I'im currently working on the code, but i can't get it to work. It crash when i try to launch it, and really before the buffer overflow in itself.

CODE
Warning workstation.c: 132  assignment of pointer to const unsigned short to poi
nter to char
0 errors, 1 warnings
workstation.obj .text: undefined reference to '_WNetAddConnection2A@16'
workstation.obj .text: undefined reference to '_WNetCancelConnection2A@12'
linker returned 2


this is what i get when i compile with lc.exe workstation.c -o work.exe. i think the problem is with the WNetAddConnection2 function. Could someone give any help on this problem ? (I'm not a C-guru :/)
isaiah
Link The Mpr.lib and it Should Work Fine...


rolleyes.gif
Toilal
ok thx. it works. i'm now trying to use the NetAddAlternateComputerName() function to use the exploit on NTFS file systems. But it seems that in need to convert an ASCII object into UNICODE (as www.eeye.com says). How can i do that ? Is there any library that contains kind of ascii2unicode() function ?
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.