I am looking for a way to do the Token Kidnapping’s Revenge exploit by Argeniss. (The vulnerability is explained in here)
I am studying security (beginner) and I would like to imitate the attack to see exactly what it does and how it happens. I am using two VMs (victim VM is Win 2003 server, no security patches). But I am lacking enough information on how to prepare the Win 2003 server VM for the attack! And the steps (especially after running the handler exploit from the attacking VM)
I tried to follow the steps in the two resources I found about this kind of demonstration:
But I feel there is a gab here. I installed IIS 6 and ASP.net on the victim VM but I am not sure if that was it (in terms of preps) and I am also messing some steps that I think the resources assume I should know already!
Any help about what I need to do to get this demo done? or is there another detailed how-to you can direct me to? I noticed other kinds of exploits are step-by-step detailed out there, but this one is not!