I am looking for a way to do the Token Kidnapping’s Revenge exploit by Argeniss. (The vulnerability is explained in here)

I am studying security (beginner) and I would like to imitate the attack to see exactly what it does and how it happens. I am using two VMs (victim VM is Win 2003 server, no security patches). But I am lacking enough information on how to prepare the Win 2003 server VM for the attack! And the steps (especially after running the handler exploit from the attacking VM)

I tried to follow the steps in the two resources I found about this kind of demonstration:

1) http://www.commonexploits.com/token-kidnapping-revenge/

2) Playing with the MS09-012 Windows Local Exploit

But I feel there is a gab here. I installed IIS 6 and ASP.net on the victim VM but I am not sure if that was it (in terms of preps) and I am also messing some steps that I think the resources assume I should know already!

Any help about what I need to do to get this demo done? or is there another detailed how-to you can direct me to? I noticed other kinds of exploits are step-by-step detailed out there, but this one is not!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.