CVE-2009-2532

This exploit targets a vulnerability in Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference, allowing remote code execution on Vista SP1/SP2 systems. It spawns a reverse shell on port 28876, granting SYSTEM-level access.

This exploit targets CVE-2009-2532, a vulnerability in Microsoft Windows SMBv2, by sending a crafted SMB packet to trigger a buffer overflow, followed by an authentication attempt to execute the injected shellcode. The payload is a reverse TCP shell generated via msfvenom.