header-logo
Suggest Exploit
vendor:
Windows
by:
Debasis Mohanty
7.5
CVSS
HIGH
Remote Code Execution
119
CWE
Product Name: Windows
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: YES
Related CWE: CVE-2008-4250
CPE: o:microsoft:windows
Metasploit:
Other Scripts:
Platforms Tested:
Unknown

MS08-067 Exploit

This is a modified version of Debasis Mohanty's code. The return addresses and the ROP parts are ported from metasploit module exploit/windows/smb/ms08_067_netapi. The exploit utilizes a reverse TCP shellcode from metasploit with a payload size of 380 bytes. The shellcode is used to execute arbitrary code on a vulnerable system. The exploit takes advantage of a vulnerability in the SMB service on Windows systems to achieve remote code execution.

Mitigation:

Apply the necessary security updates provided by the vendor. Ensure that the SMB service is not exposed to untrusted networks.
Source

Exploit-DB raw data: