Windows 2000 remote IIS .ida exploit - Spawns a shell on port 8008. Tested on Win2k with no service pack and SP2. Includes instructions on finding the offset.
a5c87b494e047e53be40395d92e556f28ceb11a767e48bdc5dfaeb792bf0cbf2
Share Password Checker acquires the list of shared folders of a Windows 95/98/Me machine on the network and shows you those folders' passwords. This tool acquires the list of the shared folders also for Windows NT/2000 machines, but it only distinguishes folders who have no password. "Share Password Checker" uses the"Share Level Password" Vulnerability. And "Share Password Checker" aims to check whether the patch for this vulnerability has been applied to the target host. Please see the topic Reveal Windows9x Share Password for more detail.
68ffcf6b92de4161369856d55490632077c5eedbc5d8e39999e6710a4768f31c
GetAcct sidesteps "RestrictAnonymous=1" and acquires account information on Windows NT/2000 machines.
5b6bbd73cb22a89f3ab034094eb23b9a4bd57627c373c87d1de7aa635ae60e38
ScoopLM searches out the password from LM/NTLM authentication information (LanManager and Windows NT challenge/response). Tested on Windows 2000.
383905e6cda11790aee4510ec73ca026bdcf996dccdaac5e51ba8609abc73a42
Promiscan is Windows software which searches for machines which are in promiscuous mode on the local network. It does this quickly and without generating a high network load. Tested on Windows 2000 professional. Requires Winpcap.
3a6524a2c100de9ecb3624e7cdb458d2c4772fa6e687cb2353e3824e3e5e5298
This is a Linux/portable port of OpenBSD's excellent OpenSSH. OpenSSH is based on the last free version of Tatu Ylonen's SSH with all patent-encumbered algorithms removed, all known security bugs fixed, new features reintroduced, and many other clean-ups.
3497cd653b279784cce1aa396afd42714a6d57bcfe180d6ca6198520adde498b