Metasploit USES Samba zero-day exploit
HD says he wrote his own version of the Samba zero-day exploit and put it on metasploit.com.
Explicit Confidence 99% · HD Moore EP 114 Details
“we wrote our own version of the exploit, put it on metasploit.com”
Exploit
exploit:samba_zero_day_exploit
Exploit developed from the captured attack against the Samba service and later published through Metasploit.
Exploit developed from the captured attack against the Samba service and later published through Metasploit.
“we were able to carve out the initial exploit”
“we wrote our own version of the exploit”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | EXPLOITS | Samba remote zero-day | Derived | 114 |
| outgoing | AFFECTS | Samba | Explicit | 114 |
| outgoing | DISCOVERED_BY | HD Moore | Explicit | 114 |
| incoming | USES | Metasploit | Explicit | 114 |
Metasploit USES Samba zero-day exploit
HD says he wrote his own version of the Samba zero-day exploit and put it on metasploit.com.
Explicit Confidence 99% · HD Moore EP 114 Details
“we wrote our own version of the exploit, put it on metasploit.com”
Samba zero-day exploit EXPLOITS Samba remote zero-day
The exploit was created for the previously unknown remote Samba vulnerability.
Derived Confidence 96% · Jack Rhysider EP 114 Details
“he realized this was a completely unknown vulnerability to everyone, which is called a zero-day exploit”
Samba zero-day exploit AFFECTS Samba
The zero-day exploit targeted the Samba service running on the employer's demo website.
Explicit Confidence 98% · Jack Rhysider EP 114 Details
“They developed their own exploit and attacked HD’s employer’s website”
“there’s a really awful remote 0-day in Samba”
Samba zero-day exploit DISCOVERED_BY HD Moore
HD captured the incoming traffic, carved out the exploit, and analyzed the unknown Samba vulnerability.
Explicit Confidence 98% · HD Moore EP 114 Details
“we were able to carve out the initial exploit”
“Did some analysis on it”