Nmap Development mailing list archives

Re: NSE Script to exploit the Windows Vista and 7 SMB 2.0 remote BSOD bug?


From: Fyodor <fyodor () insecure org>
Date: Thu, 10 Sep 2009 01:36:35 -0700

On Wed, Sep 09, 2009 at 10:44:29PM -0700, Fyodor wrote:

It does not look like a script to exploit the issue to crash a machine
would be very hard.  It would go into the "intrusive" category, and we
might want to put it in a new "dos" category as well.

Even better would be a script which can reliably detect the
vulnerability without exploiting it.  The script could have a special
option for when exploitation is desired as well.

And even better than that is if you can exploit it for remote code
execution as described here:

http://www.reversemode.com/index.php?option=com_mamblog&Itemid=15&task=show&action=view&id=64&Itemid=15

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: