[Broomop]

ms15-034 exploit to root windows machine anyone know where i can get a script or anything to exploit this i want it bad :D

[bonjourmonsieur]

Here: https://github.com/rapid7/metasploit-fra...longadd.rb

[Annyst]

Here: github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/ms15_034_ulonglongadd.rb

That's only a denial of service exploit.

[Broomop]

Here: https://github.com/rapid7/metasploit-fra...longadd.rb

yeah thanks i already know this and it works but its possible to do a payload with this exploit supposedly.

[bonjourmonsieur]

That's only a denial of service exploit.

Microsoft considered the vulnerability as a remote code execution vulnerability. But at this point, no exploit has been made public that executed code. Only DoS exploits are available.

As far as I can tell, there is no RCE vuln weaponized exploit (public). :)

[Broomop]

As far as I can tell, there is no RCE vuln weaponized exploit (public). :)

thats why i want it. 🤗

[Key Punch]

thats why i want it. 🤗

To weaponize it just change...

res = send_request_raw(
'uri' => uri,
'method' => 'GET',
'headers' => {
'Range' => "bytes=0-#{upper_range}"
}
)

to

res = send_request_raw(
'uri' => uri,
'method' => 'GET',
'headers' => {
'Range' => "bytes=18-#{upper_range}"
}
)

In the metasploit module linked above

[Broomop]

To weaponize it just change...

res = send_request_raw(
'uri' => uri,
'method' => 'GET',
'headers' => {
'Range' => "bytes=0-#{upper_range}"
}
)

to

res = send_request_raw(
'uri' => uri,
'method' => 'GET',
'headers' => {
'Range' => "bytes=18-#{upper_range}"
}
)

In the metasploit module linked above

i
want
shell omg man...

[dongrat]

google search it to find it thats how I found it

[Viktory]

Just nitpicking but you can't "root" a windows machine.

[Broomop]

i want to exploit the machine man... using shell code all these links just show how stupid you all are?

[SIM-2198759]

i want to exploit the machine man... using shell code all these links just show how stupid you all are?

You call everyone stupid, yet ms15-034 is not a "root" exploit.

[#Skyline]

What the fuck, you can't root a windows machine, and it's not a root exploit.
Get real cunt, no ones gonna help you if you call them stupid.

[Broomop]

Well ok i want to get into the machine. Posh gits.

[CyberStrike]

Well ok i want to get into the machine. Posh gits.

Wow 3 years still trying, I must say I respect your determination. Can you maybe update or give us an idea as to all iimportant information? eg target os, network set (LAN/WAN), are you still using metasploit .. I am sure you have more things you would want to add also