Stunning work by HDM and friends.

[hdm at metasploit.com (H D Moore)]

Its been on the todo list for a few weeks, I just haven't gotten together 
the time and notes to explain it. The basic idea:

-- outside of metasploit --
Run nmbd saying your netbios name is WPAD
Run a web server hosting a wpad.dat, saying that all connections should go 
through your IP as a proxy server.

-- inside metasploit  --
Run the socks proxy server found in auxiliary/server/socks_unc
Run the smb_relay exploit found in exploits/windows/smb/

-HD

On Friday 14 September 2007 06:15, Mr Gabriel wrote:
> Okay, enough with the awe and adimiration, what I really want to know
> is, is there a write up of the demo exploit that you performed towards
> the end of the talk? It would be such a brilliant demo for me to show a
> few of my clients who have their head up their ass!