I have a victim which is vulnerable to the RPC-DCOM vulnerability (MS03_26). The victim OS is Windows Server 2003, and It has Kaspersky Antivirus. When I try to exploit via Metasploit it exploited completely but no session will be created.

closed as off-topic by limbenjamin, S.L. Barth, Anders, techraf, Matthew Aug 25 '16 at 12:28

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem." – limbenjamin, S.L. Barth, techraf, Matthew
If this question can be reworded to fit the rules in the help center, please edit the question.


This is because that vulnerability is patched. You can practice on Windows Server 2000

Before exploiting, first find information related to that vulnerability

msf> info exploit/windows/smb/ms03_26

Also when you set your exploit then use the command check

It will tell you if the vulnerability exists in victim or not

  • @Behdad your outburst was unwarranted and misguided. Please be nice. – schroeder Aug 26 '16 at 7:05

Not the answer you're looking for? Browse other questions tagged or ask your own question.