注册
登录
| 关键词： stack IPADDRESS user overflow You cases prior milw will nbsp |
In vstudio command prompt: mk.bat next: attach debugger to services.exe (2k) or the relevant svchost (xp/2k3/...) net use \\IPADDRESS\IPC$ /user:user credsdie \\IPADDRESS \pipe\srvsvc In some cases, /user:"" "", will suffice (i.e., anonymous connection)You should get EIP -> 00 78 00 78, a stack overflow (like a guard pageviolation), access violation, etc. However, in some cases, you will getnothing. This is because it depends on the state of the stack prior to the "overflow".You need a slash on the stack prior to the input buffer. So play around a bit, you'll get it working reliably... poc:http://milw0rm.com/sploits/2008-ms08-067.zip # milw0rm.com [2008-10-23] |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
