Exploit para falhas em Servidores da Microsoft

[d3rf]

Serve para Microsoft IIS(4) NT4 e IIS(5) (Windows 2000) ...

Ps.: Não testei ... testem ae ...

/*
 *   DDK - 2k2 -
 *
 *
 *   coded by NeMeS||y tnx to Birdack
 * 
 *   
 */

// IIS 4(NT4) - IIS 5(2K) .asp bof

#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include www.iisvictim.com)\n"
         "  -t target\n"
      "  -p port      (default 80)\n"
         "  -f path_file (default /iisstart.asp)\n"
         "  -b step      (brute force, try step 2000)\n\n"
         "Available targets:\n\n");
  while(target[j].def != 666)
        {
          printf("  %d ] - %s -\n", target[j].def, target[j].descr);
          j++;
        }
  printf("\n"); 
  exit(1);
}

[slul]

root@kurumin:/home/kurumin/exploits# gcc iis.c -o iis
iis.c:190: warning: initialization makes integer from pointer without a cast
iis.c:263:9: missing terminating " character
iis.c: In function `main':
iis.c:265: error: stray '\' in program
iis.c:265: error: `Start' undeclared (first use in this function)
iis.c:265: error: (Each undeclared identifier is reported only once
iis.c:265: error: for each function it appears in.)
iis.c:265: error: syntax error before "n"
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265: error: stray '\' in program
iis.c:265:84: missing terminating " character
iis.c:269:22: missing terminating " character
iis.c:271: error: `Brute' undeclared (first use in this function)
iis.c:271: error: syntax error before "forcing"
iis.c:271: error: `forcing' undeclared (first use in this function)
iis.c:271: error: stray '\' in program
iis.c:271: error: stray '\' in program
iis.c:271:51: missing terminating " character
iis.c:274: error: syntax error before ')' token
iis.c:276: error: syntax error before ')' token
iis.c: At top level:
iis.c:281: error: syntax error before "unsigned"
iis.c:282: error: syntax error before "unsigned"
iis.c:283: error: syntax error before "unsigned"
iis.c:285: error: syntax error before '&' token
iis.c:286: error: `buf' undeclared here (not in a function)
iis.c:286: error: invalid initializer
iis.c:286: warning: data definition has no type or storage class
iis.c:293: error: syntax error before string constant
iis.c:294: warning: conflicting types for built-in function `sprintf'
iis.c:294: warning: data definition has no type or storage class
iis.c:296: error: syntax error before "unsigned"
iis.c:297: error: syntax error before "unsigned"
iis.c:299: error: syntax error before '(' token
iis.c:301:24: missing terminating " character
iis.c:303: error: syntax error before string constant
iis.c:303:13: invalid suffix "x" on integer constant
iis.c:303:16: invalid digit "8" in octal constant
iis.c:303:23: missing terminating " character
iis.c:306: warning: conflicting types for built-in function `fprintf'
iis.c:306: warning: data definition has no type or storage class
iis.c:308: error: syntax error before numeric constant
iis.c:308: warning: data definition has no type or storage class
iis.c:309: warning: parameter names (without types) in function declaration
iis.c:309: warning: data definition has no type or storage class
iis.c:310: error: syntax error before string constant
iis.c:310: warning: conflicting types for built-in function `printf'
iis.c:310: warning: data definition has no type or storage class
iis.c:311: error: `host' undeclared here (not in a function)
iis.c:311: error: initializer element is not constant
iis.c:311: warning: data definition has no type or storage class
iis.c:312: error: syntax error before "if"
iis.c:315: error: syntax error before string constant
iis.c:315: warning: data definition has no type or storage class
iis.c:316: error: syntax error before '-' token
iis.c:316: error: conflicting types for `exit'
/usr/include/stdlib.h:612: error: previous declaration of `exit'
iis.c:316: warning: data definition has no type or storage class
iis.c:320:18: missing terminating " character
iis.c:322: error: stray '\' in program
iis.c:322: error: stray '\' in program
iis.c:322:29: missing terminating " character
iis.c:325: warning: parameter names (without types) in function declaration
iis.c:325: error: conflicting types for `l33thax0r'
iis.c:198: error: previous declaration of `l33thax0r'
iis.c:325: warning: data definition has no type or storage class
iis.c:326: error: syntax error before numeric constant
iis.c:326: warning: data definition has no type or storage class
iis.c:424: error: conflicting types for `l33thax0r'
iis.c:325: error: previous declaration of `l33thax0r'
iis.c: In function `l33thax0r':
iis.c:443: error: incompatible types in assignment
iis.c:451: error: incompatible types in assignment


qdo vi o code tive certeza q meu mero gcc nao conseguirria compilar esse troço =P

[d3rf]

Tenta outro compilador ...
ve se alguém do fórum conseguiu compilar e perguntar qual usou

[slul]

amigo... esse xpl eh pra unix ou soh pra windows?

[_Dr4k0_]

Tentei com o dev-c++ tb não consegui não..

porém deu bem menos erros..

[d3rf]

Para WINDOWS kara, só para WINDOWS ... compila no WINDOWS

[OnlyOne]

UNIX xpl ok guys ? lembrando a vcs q nao e pq foi feito em C q vai roda em windows e *NIX , existem diferenças entrre C pra windows e C pra *NIX

[Anonymous]

Humm..
Galerinha então o xpl proposto acima é Windows mesmo e assim.. ele não vai compilar por estar travado contra scriptKID como todo exploit que se preze é travado ( menos os meus que são direcionados a este forum )

bom .. então primeiro é necessario quebrar a proteção contra ScriptKid para dps compilarem.. e assim ele compila em Linux sim basta fazer algumas modificações..

Se eu conseguir compilar eu coloco o Download Dele..
Com o código Des-Protegido e o Executavel..

Falow gente.!!

[Anonymous]

Opa corrigindo desculpa ai mais o xpl é pra LINUX.. usado linux contra Windows..

para afetar o windows..
e assim ele está usando os cabeçalhos de Linux vejam só..

Code Select Expand


#include <signal.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <sys/ioctl.h>
#include <sys/time.h>
#include <sys/wait.h>
#include <errno.h>
#include <unistd.h>
#include <fcntl.h>
#include <netinet/in.h>
#include <limits.h>
#include <netdb.h>
#include <arpa/inet.h>



Então mais dá sim para portar para Windows .. porem seria um trabalho a mais .. talvez mais tarde se me sobrar tempo eu porto ele para windows.. porem ele é linux mesmo não tinha visto corretamente os cabeçalhos..

desculpem pelo post duplo também . mais não tem edit..*