[TeMk]

Hello,
There are no Tutorials how to use this exploit. And i saw a lot of people wants to know this works. Well i will explain everything in this Tutorial.

FIRST:
I'm talking about this exploit:




You needs:
Visual C++ 2010 - http://www.microsoft.com/visualstudio/en...pp-express
C/C++ Command Prompt Compiler - http://www.speedyshare.com/files/29450799/dm852c_2_.zip
PuTTY or Telnet - http://www.chiark.greenend.org.uk/~sgtat...nload.html
Apache 2.2.14 mod_isapi exploit - http://www.senseofsecurity.com.au/adviso...-isapi.cpp

Some questions:
I have Windows 7, and i want to use Telnet. How can i do that?
There is a great Tutorial about that. Just click here:
https://hackforums.net/showthread.php?ti...+windows+7

Begin:
Ok, if you installed/downloaded everything. I will tell what you need to do.
1 > Make a folder in C:/ called "whateveryouwant" and extract dm852c.zip.
2 > Click on Start and search for: Visual Studio Command Prompt.
3 > Open it and go to the directory where dm852c.zip was extracted, you need to go to the bin. Like this:

PHP Code


<?php 
cd C:\whateveryouwant\bin 


4 > Download the exploit and copy that to the bin folder. Now go to the Visual Studio Command Prompt and write this:

PHP Code


<?php 
cl pwn-isapi.cpp 


(can be different look at the name
The exploit will now be written, and it will be a .exe (Executable) file.
5 > Alright, now type in Visual Studio Command prompt this:

PHP Code


<?php 
pwn-isapi.exe IPADRES "SMTPSend.dll?Send" 


I hope you like this, and hope it will work for some people that didnt know how to do this.

Waves'
TeMk

[saawan]

I cant understand whats in this tutorial

[TeMk]

I cant understand whats in this tutorial

Look at the video and you will understand what i mean.

[Fa✝e]

I've tried this before on a Windows Server 2008, but couldn't find a shellcode to work for that Operating System :(

http://www.senseofsecurity.com.au/adviso...-isapi.cpp

Doesn't really help you gain access to the computer you are trying to exploit, all it does is this:
//custom shellcode that writes "pwn-isapi" to "sos.txt" in the current working directory
//Note: There are four NOPs at the end for padding. Not really needed.

But nonetheless, its a good proof of concept.

[bombasschicken]

You needs:
Visual C++ 2010 - http://www.microsoft.com/visualstudio/en...pp-express
C/C++ Command Prompt Compiler - http://www.speedyshare.com/files/29450799/dm852c_2_.zip
PuTTY or Telnet - http://www.chiark.greenend.org.uk/~sgtat...nload.html
Apache 2.2.14 mod_isapi exploit - http://www.senseofsecurity.com.au/adviso...-isapi.cpp

Some questions:
I have Windows 7, and i want to use Telnet. How can i do that?
There is a great Tutorial about that. Just click here:
https://hackforums.net/showthread.php?ti...+windows+7

Or just use linux and save yourself the headache..
code was prolly disabled anyways..

[Broomop]

im trying to use this on a windows 2008 if i can exploit it with help ill send some money through paypal for you.

[nothing1]

Was this leeched or something? He only has 2 posts, and now a closed account.

[d00m]

well i tried it says check for sos.txt :S what does tht mean i checked site like www.site.com/sos.txt nothing was there and no telnet sucess too

[mands]

sure there's no telnet connection, you need to put another payload / shellcode in the exploit.
the shellcode in exploit only writes sos.txt into the working directory.

i'll think you can put another shellcode in this exploit.

[I R PK3R]

sure there's no telnet connection, you need to put another payload / shellcode in the exploit.
the shellcode in exploit only writes sos.txt into the working directory.

i'll think you can put another shellcode in this exploit.

Why did you a 2011 thread?

mtsmts

[chrisk8er]

the shellcode write sos.txt only.
you have to change the shellcode to exploit it. and the video used costom bind shell.
check http://www.senseofsecurity.com.au/advisories/SOS-10-002

Code

* Shellcode Note:
* The shellcode writes "pwn-isapi" to "sos.txt" which is created in the current working directory.
* Most operating systems should be supported by this shellcode. I've used Skylined's method of finding
* the base address of kernel32.dll for Windows 7 and modified it so that it will find the base
* address of msvcrt.dll instead. I've also added another check so that it will be able to detect
* "msvcrt.dll" on Windows Server 2003 (this OS loads msvcrt.dll in 5th position, and before this
* DLL string is read, another DLL (RPCRT4.dll) length is verifiied which matches the length of
* msvcrt.dll. So the added check will verify the presents of "m" before proceeding.

[Sekret]

Didnt get this working either ......

[thegodhello]

This doesn't work

sadly :(

I would've used it!

[taurus366]

warning c4530 c++ exception handler used but unwind semantics are not enabled. specify /ehsc what is this? help me please

[run_finder]

I can't seem to get this to work. Any help would be appreciated.