Yo ppl
I am a newbie who is reading the forums for a while and I tried some exploits and got shells with some of them.

Now I am wondering which exploits are you ppl still can get shells 'cos I cannot get shell with the old exploits like webdav, sql and the others

thx.

lol i guess best exploit still is sql, but most of the machine's u get like that are pretty slow... Else if ur any good try ssh

rpc is good but now most of computer are patch ....I thnik we need a new big exploit for windows

Yeah way back when rpc 1 came out I was doing large scans, like 68.0-10.0-255.2-254. On may cable connection it took about 7-8 hours. Damn, good times, we defiantly need another major vulnerability in winblowz. Now that nmap has the random scan function I really want a new vulnerability.
If you are looking for ports to scan check out:

http://isc.incidents.org/

Now not all of toughs are people looking for vulnerability. Edoneky for example, that caused by how Edonkey the program works. Do some research into the port, check out google, then compile some exploit code and start your scanning.

You really need to use an auto hacker, I just threw one together with perl. I found if I did a 7-8 hour scan while I was in class, the computers would often be down when I came back to them.

peace out

(p.s. sory for the double post)

i think the best exploit now atm is dameware....

whell lately if you get a result with SqL (wich is rare) then most of the time i get sql error.... so that not much of a good thing either

try 2 scan .KR
and hack them with apachechunked
good luck!

windows media services exploit is still quite ok. if u scan frontpage in asia u get some shells, too. but u will need a good autohacker coz u get many many scan-results for frontpage and 1 out of 500 may work (that makes about 50-100 shells for a range 220.*-221.* for example).

i would say: wait for a new exploit to be released and then try ur luck with this one. the old ones dont really pay...

greetz

The best exploit is the one you write yourself and never give out.

sql is still nice atm, but the machines are not that fast, ammount of hacking results is great, butt not fast connections :S

I beg to differ on that 'fast part'. I snagged a box that pushed 5000kb/sec last week. All in the luck of the draw.

i just found this exploit on a site but can't find it on this site.. maby someone can help me what this is i think it's a good sploit...
CAN-2004-0193

http://icat.nist.gov/icat.cfm?cvename=CAN-2004-0193

tnx in advance

ps i think it's a little old though

I think, that atm the best exploits are sql and dmware..

webdav, rpc and other still old exploits are DOwN


We need a New wind00f bug for new boxes

at lan, most of the pc's aren't still patched... but not in the internet :/

i think dameware is at the moment the xploit where u can get most results.

but dameware must be installed? or not? I'm a little bit confused...

sql is not an exploit!

dameware is nothing anymore all the boxes are patched
sql is okay , but you don't find a lot of them , I think NT is still okay.

SQL, Serv-u ;/
dameware is dead

ok... what do u think about ASN.1

ASN? i heard about that exploit but i never found a good compiled version of the exploit can you give me some more info about that 1?

not every serv-u is a stro !

SQl is not a exploit but still find some results,

i agree with the others
mssql is still doing a fine job
just have to know where to scan and you need a good wordlist so its no problem to get some nice servers

Can you post your wordlist

Just a try

Thx Doc

wordlist ? bugger it I better read up about this one, I assume bits about it will be in the forum but has someone written a guide about it ?

P4000 is given some results 2 me

I know that is not a xploit, like SQL

I have to agree with most of u that sql (although not an exploit) is still working pretty fine. Webdav and dameware are a bit dead but it is still possible to get some shells with those. U just have to be a bit lucky.

What about netbios on NT machines, is that still any good?

where can i get the vulnerable dameware server for a test ???


"edit"

i don't want a ip , but a url where i can download the program
to test it on my lan

Well i have still some results with dameware, had one 10mbit last week. but you have 2 be lucky most of them aren't good.


But yeah what is the best exploit 4 win...

I have a question 2 on this topic does any one know more about an exploit called lan, i can't find anything about it, one guy knows but he does not want 2 share this information 2 bad so any one know more about it in here ??