Leaving for a wedding tomorrow, if I can't find anything then someone else take the reins
Going to drop the crash PoC here Friday if there isnt one public already... Maybe the following week, depending on if the vulnerable numbers drop consistently or not.
I'm not responsible for what you use this to accomplish and should only be used for education purposes
didn't port the socket to talk to server 2003 and win xp but should be straight forward if you wanted (Add security exchange PDU and do the math)