When I had the similar issue, I formatted my windows xp sp3 box & reinstalled xp WITHOUT the service pack. So, it became unpatched and now, even with the autopwn, I can get 6 sessions.
Hi there,
does anyone know where I can download httpdx 0.7 or earlier? or if not a good program to experiment with buffer overflows? I want to write PoC code (probably in python) with the ultimate result being a bind shell opening on the victim machine. Something windows based obviously.
I have a rather dated tut for an ftp server but the version used is no-longer available. I just want to write an exploit to ensure that I understand the concept. I have no previous experience of this but I think I'm getting my head around it slowly. I have 2 machines I can use as "attacker" and "victim", ollyDBG set up on the victim (windows xp sp3) and Backtrack on the attacker. The newer version of the server used in the video tut has obviously been modified to prevent exploiting it via the method shown (the process can't be attached to ollyDBG and feeding in a buffer as shown gets acknowledged but doesn't cause a crash).
any advice would be great
thx
When I had the similar issue, I formatted my windows xp sp3 box & reinstalled xp WITHOUT the service pack. So, it became unpatched and now, even with the autopwn, I can get 6 sessions.
If you can't explain it simply, you don't understand it well enough -- Albert Einstein
This might be just what your after:
Download old vulnerable softwares version
This site hots tonnes of old, vulnerable software for your hacking needs.
I'm trying to get into this as well, but learning how to port exploits to metasploit by myself.
Thanks, that looks like exactly what I wanted I'll get on with it soon.
thx very much
Capitalisation is important. It's the difference between "Helping your brother Jack off a horse" and "Helping your brother jack off a horse".
The Forum Rules, Forum FAQ and the BackTrack Wiki... learn them, love them, live them.