hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Starlight
I would like to know if there is a scanner which scan the fault:

Ms03-049 (workstation) Xp Sp0 and Sp1

Thx
boshcash
i dont think there would be a scanner for the workstation exploit , scan port 135 and try everyone
FireAlwaysWorks
QUOTE (boshcash @ Dec 5 2003, 06:53 PM)
i dont think there would be a scanner for the workstation exploit , scan port 135 and try everyone

Port 135 as well as all(almost) of the NetBios and rpc ports are locked tighter than the lock of a slutty farmers douther. Translation: you wont find much.

I sugest using ms03-043 and getting Paketto and serching for open UDP ports on udp 1025 or any random udp port between 1025-65535. A worm using ms03-043 is going to be nasty because that random port. See blaster only got stoped becase ISP's blocked the RPC ports. You can't block UDP 1025-65535 it would cause so many problems.

What can be done? Pray just pray that a "good" worm that patched the problem comes out. It won't stop the problem but it will lessen the dammange.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.