From this topic:

http://www.governmentsecurity.org/forum/in...?showtopic=4355

I compiled the exploit for u guys..enjoy! Havn't tested it out becuz I use XP w/o SP1 on my system.

One more thing...the shell is bound to port 9191..which differentiates this exploit from other DOS POC versions.

whats the world coming to vnet makeing exploits lol

i mite give it a try..Cheerz M8

thank You vnet576 for compiling this.
Cheers

great work m8t nice tool
but did any one have a good result????
I have tryed alot of ips but on all i cant connect to 9191 with telnet

What port do we use to scan?



Thanks

scanmsgr.exe

its somewhere on the board i thought...

greetzz

use scan1000 or whatever, scan for port 139, this exploit doesnt work at all ive tried 1000's of pc's. no go.

oh, (filtered) me :/ im useless, thansk alot ill give it a try on the machines again and edit this post, thx.

//edit

still no go, get the same errors as i did with 139 (but with 135)

you get any v?

i scan with scanmsgr.exe first some ranges
then i see which are vurnable then i put them in the exploit
but then when i connect with nc or with telnet i got no response on that 9191 port.
too bad

here the link for the scanning device
http://www.iss.net/support/product_utilities/ms03-043

Well I've just read the post by Scriptgod in the Exploits section and it appears that the messenger exploit is local privelage escalation. That is why none of us are getting any results with this one. I also tried this remote with no result.

Can anyone confirm whether this particular one works locally? I don't use SP1 so I can't try it on my machine.

tried local and doesnt work...

nothing listening on 9191

is this still for FAT?

it works on win2k sp3.... i dont have xp sp1 to test it.....

how can i get more offsets for this exploit?

Well the author of the exploit included a XP SP0 offset but he commented it out and said it wasn't tested. So I readded that part back into the exploit.

for xp sp0 didnt worked

nope doesn't work ..

dammed