The MS08-067 exploit was used to exploit the MS08-067 vulnerability.
Explicit Confidence 99% · Jack Rhysider EP 57 Details
“run this exploit against it”
Exploit
exploit:ms08_067
Exploit for the Windows vulnerability later included in Metasploit and used by worms including Conficker.
Exploit for the Windows vulnerability later included in Metasploit and used by worms including Conficker.
“You pick the MS08-067 exploit”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | EXPLOITS | MS08-067 | Explicit | 57 |
| outgoing | USES | egg hunt | Explicit | 57 |
| incoming | USES | Conficker | Explicit | 57 |
| incoming | USES | Metasploit | Explicit | 57 |
The MS08-067 exploit was used to exploit the MS08-067 vulnerability.
Explicit Confidence 99% · Jack Rhysider EP 57 Details
“run this exploit against it”
The exploit observed in the crash report used an egg-hunt technique to split the exploit into two parts.
Explicit Confidence 99% · John Lambert EP 57 Details
“It had a difference in it, what I call an egg hunt”
Conficker adopted the MS08-067 vulnerability as a spreading mechanism and used it against unpatched systems worldwide.
Explicit Confidence 99% · John Lambert EP 57 Details
“a Conficker worm that had been this sort of small-scale thing for a time, adopted this vulnerability as a spreading mechanism”
Metasploit USES MS08-067
Metasploit includes a pre-programmed MS08-067 exploit that can be run against a vulnerable Windows XP machine.
Explicit Confidence 99% · Jack Rhysider EP 57 Details
“You pick the MS08-067 exploit, then point at your Windows XP machine, type run, and boom. You’re in”