+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: ms15-034 exploit to root windows machine (/showthread.php?tid=4943732)
ms15-034 exploit to root windows machine - Broomop - Aug 10, 2015
ms15-034 exploit to root windows machine anyone know where i can get a script or anything to exploit this i want it bad :D
* - bonjourmonsieur - Aug 10, 2015
Here: https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/ms15_034_ulonglongadd.rb
* - Annyst - Aug 10, 2015
(Aug 10, 2015 10:30 AM)bonjourmonsieur Wrote: Here: github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/ms15_034_ulonglongadd.rb
That's only a denial of service exploit.
* - Broomop - Aug 10, 2015
(Aug 10, 2015 10:30 AM)bonjourmonsieur Wrote: Here: https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/ms15_034_ulonglongadd.rbyeah thanks i already know this and it works but its possible to do a payload with this exploit supposedly.
* - bonjourmonsieur - Aug 10, 2015
(Aug 10, 2015 11:39 AM)Annyst Wrote: That's only a denial of service exploit.
Quote:Microsoft considered the vulnerability as a remote code execution vulnerability. But at this point, no exploit has been made public that executed code. Only DoS exploits are available.
As far as I can tell, there is no RCE vuln weaponized exploit (public). :)
* - Broomop - Aug 10, 2015
(Aug 10, 2015 11:46 AM)bonjourmonsieur Wrote: As far as I can tell, there is no RCE vuln weaponized exploit (public). :)
thats why i want it. 🤗
* - Key Punch - Aug 10, 2015
(Aug 10, 2015 05:01 PM)Broomop Wrote: thats why i want it. 🤗
To weaponize it just change...
res = send_request_raw(
'uri' => uri,
'method' => 'GET',
'headers' => {
'Range' => "bytes=0-#{upper_range}"
}
)
to
res = send_request_raw(
'uri' => uri,
'method' => 'GET',
'headers' => {
'Range' => "bytes=18-#{upper_range}"
}
)
In the metasploit module linked above
* - Broomop - Aug 16, 2015
(Aug 10, 2015 06:13 PM)thebigchicken Wrote: To weaponize it just change...
res = send_request_raw(
'uri' => uri,
'method' => 'GET',
'headers' => {
'Range' => "bytes=0-#{upper_range}"
}
)
to
res = send_request_raw(
'uri' => uri,
'method' => 'GET',
'headers' => {
'Range' => "bytes=18-#{upper_range}"
}
)
In the metasploit module linked above
i
want
shell omg man...
* - dongrat - Aug 17, 2015
google search it to find it thats how I found it
* - Viktory - Aug 17, 2015
Just nitpicking but you can't "root" a windows machine.
* - Broomop - Aug 20, 2015
i want to exploit the machine man... using shell code all these links just show how stupid you all are?
* - SIM-2198759 - Aug 20, 2015
(Aug 20, 2015 01:32 PM)Broomop Wrote: i want to exploit the machine man... using shell code all these links just show how stupid you all are?
You call everyone stupid, yet ms15-034 is not a "root" exploit.
* - #Skyline - Aug 21, 2015
What the fuck, you can't root a windows machine, and it's not a root exploit.
Get real cunt, no ones gonna help you if you call them stupid.
RE: ms15-034 exploit to root windows machine - Broomop - Sep 9, 2018
Well ok i want to get into the machine. Posh gits.
RE: ms15-034 exploit to root windows machine - CyberStrike - Sep 9, 2018
(Sep 9, 2018 08:46 AM)Broomop Wrote: Well ok i want to get into the machine. Posh gits.
Wow 3 years still trying, I must say I respect your determination. Can you maybe update or give us an idea as to all iimportant information? eg target os, network set (LAN/WAN), are you still using metasploit .. I am sure you have more things you would want to add also