SRO Blitzkrieq -> Beginning

~~18andLife~~ · 09/07/2011, 21:14

i connected but it was at the windows logon screen XD

hambal · 09/07/2011, 21:19

i need id and pass

vorosmihaly · 09/07/2011, 21:20

Quote:

Originally Posted by hambal

i need id and pass

kk.and I need a new car.

hambal · 09/07/2011, 21:22

Quote:

Originally Posted by vorosmihaly

kk.and I need a new car.

stop the spam plz i didnt ask for that answer stupid kid

vorosmihaly · 09/07/2011, 21:22

Quote:

Originally Posted by hambal

stop the spam plz i didnt ask for that answer stupid kid

lol'd. you're calling me kid and you're crying for id & pw here..funny guy

kagestodder · 09/07/2011, 21:23

I think you can use that exploit to get in, no??

hambal · 09/07/2011, 21:24

Section:SRO Coding Corner

so what why i cant ask it you didnt and cant forbit me for it so go keep ur spamshit somewhere else

s2k · 09/07/2011, 21:36

are you sure that there are server files?

ahmed4ever2u · 09/07/2011, 21:47

waiting ....

s2k · 09/07/2011, 21:54

~~lollag~~ · 09/07/2011, 22:02

what are you aiming for with this topic Chernobyl?

2elements · 09/07/2011, 22:22

cherno you said you dont need pw to this, means you go with another exploit?

minimalis · 09/08/2011, 01:43

Quote:
Originally Posted by Chernobyl*
Tons of machines with MSSQL 2000 SP4 machines, available SMB services, ftp servers, etc...
HINT :
Code:
ms 09_004_sp_replwritetovarbin

Sure about that? Seems like they are not running MSSQL 2000/2005 so exploit cannot run down effectively.

Chernobyl* · 09/08/2011, 01:56

Quote:

Originally Posted by minimalis

Sure about that? Seems like they are not running MSSQL 2000/2005 so exploit cannot run down effectively.

Check again

.

minimalis · 09/08/2011, 02:40

Quote:

Originally Posted by Chernobyl*

Check again .

Only 4 of 'em has 1433(tcp) opened:

Code:

Discovered open port 1433/tcp on 123.30.200.12
Discovered open port 1433/tcp on 123.30.200.11
Discovered open port 1433/tcp on 123.30.200.9
Discovered open port 1433/tcp on 123.30.200.13

With Auto MSSQL detection:

Code:

[-] Exploit exception: [B][I][U]Invalid SQL Server credentials[/U][/I][/B]
[*] Exploit completed, but no session was created.

MSSQL set to 2000 SP4 manually:

Code:

[*] Exploit completed, but no session was created.