Public Exploit Code:
Use from this sites
- Exploit DB (Mainted by offensive security)
- SecurityFocus Vulnerability Archies (Maintained by Symantec)
search exploit in archive using searchsploit tool
>> searchsploit slmail
Fixing Public Exploit:
- observing libraries it is clear it should be compilled in Linux like environment .
- return address irrelevent
- hard coded shell-code
- buffer-offset misaligned
cross-compiling linux exploit to windows
- libraries indicate code should be compiled in windows environment
- embedded bind shell payload
- return address irrelevant to target
ming tool :
i586-mingw32msvc-gcc 646-fixed.c
i586-mingw32msvc-gcc 646-fixed.c -lsw2_32 -o slmali-windows.exe