Windows Lsasrv.dll Remote Universal Exploit XP/2K (MS04-011)

http://www.k-otik.com/exploits/04292004.HO...asrv-expl.c.php

* Tested on
* - Windows XP Professional SP0 English version
* - Windows XP Professional SP0 Russian version
* - Windows XP Professional SP1 English version
* - Windows XP Professional SP1 Russian version
* - Windows 2000 Professional SP2 English version
* - Windows 2000 Professional SP2 Russian version
* - Windows 2000 Professional SP4 English version
* - Windows 2000 Professional SP4 Russian version
* - Windows 2000 Advanced Server SP4 English version
* - Windows 2000 Advanced Server SP4 Russian version

Universal RoX

anyone got that one compiled ?
i don't want a compiled one.. just an information with what compiler i can get this to run... tried lcc32 and cl but non worked :/

anyone no what i can do too stop this exploit restarting my computer?

edit the includes to

#include <stdio.h>
#include <stdlib.h>
#include <windows.h>

and you can compile it... but it's not working against geman versions

msdev

win2k doesnt working because its the wrong offset that the exploit is use

compiled fine in VS c++
exploited test winxp sp1 box
oh crap it works
patch patch patch.....

win2k all just read my post @ the download section

Guys please dont flame me or mock me, if you dont have anything constructive to say dont say it, i tried to compile this because people asking for compiled copies annoyes me too, i know very little about c++ (just finished learning arrays) and have several build errors in vc++ 6, anyone can help ??

exploit2.c
C:\Documents and Settings\Games\exploit2.c(1) : error C2143: syntax error : missing '{' before '-'
C:\Documents and Settings\Games\exploit2.c(1) : error C2059: syntax error : '-'
C:\Documents and Settings\Games\exploit2.c(41) : error C2017: illegal escape sequence
C:\Documents and Settings\Games\exploit2.c(51) : error C2017: illegal escape sequence
C:\Documents and Settings\Games\exploit2.c(60) : error C2017: illegal escape sequence
C:\Documents and Settings\Games\exploit2.c(64) : error C2017: illegal escape sequence
C:\Documents and Settings\Games\exploit2.c(64) : error C2017: illegal escape sequence
C:\Documents and Settings\Games\exploit2.c(71) : warning C4138: '*/' found outside of comment
e:\program files\microsoft visual studio\vc98\include\excpt.h(92) : error C2143: syntax error : missing '{' before '__cdecl'
C:\Documents and Settings\Games\exploit2.c(277) : warning C4047: 'initializing' : 'int ' differs in levels of indirection from 'void *'
C:\Documents and Settings\Games\exploit2.c(284) : warning C4013: 'printf' undefined; assuming extern returning int
C:\Documents and Settings\Games\exploit2.c(345) : warning C4013: 'sprintf' undefined; assuming extern returning int
Error executing cl.exe.

exploit2.obj - 8 error(s), 4 warning(s)

Ok i got it working , i suppose i just use netcat to connect to the hacked pc, correct ?

2k offsets are wrong like somes also noticed it.
thats a bit limited the ipc$ null only on port 445 in this exploit so.
better is to update sbaa code universally for both os , 139/445 port >:]

the xp offset is the right one. it worked on my german xp, too. but i don't get a shell. the port is open but there's no shell. wrong shellcode? i'll test other ones.
wo had success?

what ever are you people saying?
exploit works fine on win2k and xp (also on german xp).
so first: Test
Second: talk

so believe in your wrong offsets, but I tested it and it works fine

HI ALL
I WANT THE SAME UNIVERSAL LSASRV EXPLOIT BUT ALSO HAVING AN OPTION FOR PORT 139 TO CONNECT.PLZZ UPLOAD IT IF ANY IS HAVING IT.
THANKZZZZ

So how the (filtered) would one program shell code ?