hi
im very proud caus this is my first exploit compiled on my own
have fun with that

best regards

do u know how we are ment to scan this

if i'm right port 4000 , but i'm not sure

i got problems when i try and run the exploit , something about cygwin.dll libary files
heres a screen shot

here

sorry, my mistake. i have uploaded a wrong attachment... here's the new one!

already got that still get the error
does it work for you?

thanks for it, will give it a try

gonna give it ago thx m8

Thanks m8

im cheking it

anyway...that error is from a corrupt cgywin.dll...download a new one.


well....the exploit says im in but i never get a hit on nc....that is listening on the port i choose.


gonna keep trying



cheers

anyway..i forgot


is this port 4000...right?

i think no one knows how to scan for this lol

must be away to scan with scan500/1000 then check it with a tool cuz there is over exploit on p4000

I'll check it out.

Thanks man.

Probably need to use a banner scaner for this

any ideas in how to scan?


on port 4000 with Scan1000 and then Scanline i just found Remote-Anything 4.12.15 and 5.1.30 ...maybe cause its scanning TCP and not UDP

----------------------------------------------------------------------------------------
195.*.*.*
Responds with ICMP unreachable: No
TCP ports: 4000


TCP 4000:
[4.12.15 ,d -p` ra X ! x"} Y& P hv [+p m] t J ] iI[ C iY _S _: 2 ' ' V\ Ae y( a-]D ) Z M J@ iX!G Px B Z D Y q T Q b* f]

----------------------------------------------------------------------------------------

That 'IS' why!

You need a user datagram protocol scanner. Use the search on this forum, theres one there in file downloads somewhere

tnx al0t

bu tsimple wonder do I have to set up a Nc to receive the shell or does it auto reverse te shell ?

uh, just to save you kids some time (go read a book or something or go out and interact socially;) I'll mention -- there IS NO port to scan for this. The bug is in a firewall parsing engine, and the only "port" involved is the source port of the packet you send, but that has nothing to do with the target host. This is a blind exploit, you have to fire it at the host and hav ethe shellcode do something meaningful like download+exec code.. i already posted on this in the other thread so i'll stop there.