» 0-day exploit for all Windows versions, gain kernel priv

[SiG]

All 32bit x86 versions of Windows NT released since 27-Jul-1993 are believed to
be affected, including but not limited to the following actively supported
versions:

- Windows 2000
- Windows XP
- Windows Server 2003
- Windows Vista
- Windows Server 2008
- Windows 7
- etc.

Source:

http://www.opensc.ws/trojan-malware-releases/9454-0-day-exploit-all-windows-versions-gain-kernel-priv.html

http://packetstormsecurity.org/1001-exploits/mswinnt-pwn.txt

Download:

http://www.speedyshare.com/files/20598414/POC_-_EXPLOIT_KiTrap0D.zip

[MaXe]

/Approved.

This exploit is the very debated vulnerability in Windows which has existed for over 10 years.

I believe there is or will be a Metasploit module for this very soon.

[ccoder]

MaXe i think 16 years , from windows 3.1

[MaXe]

Originally Posted by ccoder

MaXe i think 16 years , from windows 3.1

I said over 10 years Over == Above "where" (16 > 10) == (16 is above 10).

[ccoder]

anyone testedthis exploit ? i have tested it on winxp sp2 when run the exe file the system crashed and restart :D

[MaXe]

Originally Posted by ccoder

anyone testedthis exploit ? i have tested it on winxp sp2 when run the exe file the system crashed and restart :D

Did you look for a Metasploit module for this?

[ccoder]

i have read about it before but why using msf ? i have uploaded this exploit in a server and want to get system privilege.

http://carnal0wnage.blogspot.com/2010/01/kitrap0d-now-in-metasploit.html

[MaXe]

@ccoder: Because Metasploit is easy to use and some PoC's on the Internet contains bugs (against script kiddies).

[ubuntuhacker]

Does anyone tested this ?

[s3my0n]

Originally Posted by ubuntuhacker

Does anyone tested this ?

I've tested this on Windows XP Proffessional as a normal user and administrator and it works for both.

When I tested this on Windows 7 Home, in administrator account, it crashed, so it didn't work there, but might work for normal user.