I am trying to exploit the ms08_0067_netapi vulnerability on windows server 2003 R2 but the exploitation end with the following message:

Exploit completed, but no session was created.

Any thoughts?

Screenshot" enter image description here

  • nmap -p 445 -script smb-check-vulns -script-args=unsafe=1 <IP Address> <--- does nmap show the service as active and vulnerabile on the remote host? Do you know that the language pack for the target is in fact English? – DarkMatter Dec 21 '18 at 21:14
  • Host script results: | smb-vuln-ms08-067: | VULNERABLE: | Microsoft Windows system vulnerable to remote code execution (MS08-067) | State: VULNERABLE | IDs: CVE:CVE-2008-4250 | The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, | Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary | code via a crafted RPC request that triggers the overflow during path canonicalization. | | Disclosure date: 2008-10-23 – Ahmed M. Taher Dec 21 '18 at 21:48
  • Are you confident that English is the correct language pack for this remote host? – DarkMatter Dec 21 '18 at 22:12
  • Yes sir @DarkMatter – Ahmed M. Taher Dec 22 '18 at 12:08

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.