Friday 29 July 2011

Quick script for metasploit exploitation over LAN of a few microsoft vulns...

This is a quick perl script that allows you to fire a few exploits (with the meterpreter bindshell payload) to exploit the following microsoft vulnerabilities...

MS-08-067
MS-10-061
MS-03-026
MS-04-031
MS-07-029

Link to script (fuckms.pl)
http://pastebin.com/raw.php?i=8pw4Z6Dz

Some infodox about the exploits...

MS-08-067 Netapi exploit
> Used by Conficker to spread, later used by Stuxnet...
> http://www.microsoft.com/technet/security/bulletin/ms08-067.mspx

MS-10-061 Spoolss Exploit
> Used by Stuxnet to spread, originally thought to be 0day but was not...
> http://www.microsoft.com/technet/security/bulletin/ms10-061.mspx

MS-03-026
> http://www.microsoft.com/technet/security/bulletin/ms03-026.mspx
> An old exploit... good though :)

MS-04-031
>  http://www.microsoft.com/technet/security/bulletin/ms04-031.mspx
>  Worth a try... Sometimes.

MS-07-029
> http://www.microsoft.com/technet/security/bulletin/ms07-029.mspx
> Never had a chance to test it :(

So, if you have any input/feedback/complaints, hit me with em :)

No comments:

Post a Comment